Veit Zimmermann wrote:
> Depending on if the user supplies a password or not I set it to one of
> these values. It was on smtpAuthAutoSelect, which seems to trigger the
> "->AUTH CRAM-MD5" request. So is this a bug of TSmtpCli? 

smtpAuthAutoSelect tries to find the most secure authentication method 
possible, however it doesn't fall back to no authentication.
If you want that feature it's easy from user code. 

> Should it
> send an AUTH request, if the command is not on the list? 

I think it should since sometimes mail server do not publish all
available extensions in the EHLO response. So even if there's no
AUTH found in the list TSmtpCli stupidly does a trial and error.
This procedure has been suggested by Jake Traynham.
It doesn't hurt anyway since the server MUST accept that. 

> What is the
> default in this case?

The most secure authentication method the server publishes in 
the EHLO response. Though since more methods have been added
in the meanwhile it's not clear which one is actually the most
secure authentication.

--
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html




-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to