Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Apr 2004 10:02:26 -0700
From:      John Fox <readbsd@mind.net>
To:        freebsd-isp@freebsd.org
Subject:   CRAM-MD5 support in Outlook Express?
Message-ID:  <20040413170226.GH6087@mind.net>

next in thread | raw e-mail | index | archive | help
Hello,

We're a small ISP (~13,000 email accounts) and I would really like to see
us move away from cleartext passwords for our POP3 service.  I am currently
interested in using CRAM-MD5 authentication, as I already know I will be
installing Courier's POP3 daemon, and I've read that it supports CRAM-MD5.

I mentioned this idea on a different mailing list, and was told that 
Outlook Express (which I *must* support) does not have CRAM-MD5 support.
However, a friend who is knowledgeable in crypto field told me that 
CRAM-MD5 has been around a long time, and that he doubts that OE lacks
support for it.

So I'm writing with two hopes:

1) That someone will confirm or disconfirm the prior assertion that
OE does not support CRAM-MD5.

2) That if such support is lacking, perhaps someone else can give
me a different idea for getting rid of plaintext authentication
for POP3.

With thanks and regards,

John
--
+---------------------------------------------------------------------------+
| John Fox <jjf @ mind.net>    |   System Administrator   | InfoStructure   |
+---------------------------------------------------------------------------+
| I used to trust the media to tell me the truth, tell us the truth         |
| But now I've seen the payoffs everywhere I look                           |
| Who can you trust when everyone's a crook?                                |
|             -- Queensryche, "Revolution Calling"                          |
+---------------------------------------------------------------------------+



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040413170226.GH6087>