From owner-freebsd-isp@FreeBSD.ORG Tue Apr 13 10:01:18 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 80ACA16A4CE for ; Tue, 13 Apr 2004 10:01:18 -0700 (PDT) Received: from morpheus.mind.net (morpheus.mind.net [69.9.130.12]) by mx1.FreeBSD.org (Postfix) with SMTP id 3A66843D5D for ; Tue, 13 Apr 2004 10:01:18 -0700 (PDT) (envelope-from jfox@morpheus.mind.net) Received: (qmail 13111 invoked by uid 1001); 13 Apr 2004 17:02:26 -0000 Date: Tue, 13 Apr 2004 10:02:26 -0700 From: John Fox To: freebsd-isp@freebsd.org Message-ID: <20040413170226.GH6087@mind.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i X-Quip: Fly the white flag of war! Subject: CRAM-MD5 support in Outlook Express? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Apr 2004 17:01:18 -0000 Hello, We're a small ISP (~13,000 email accounts) and I would really like to see us move away from cleartext passwords for our POP3 service. I am currently interested in using CRAM-MD5 authentication, as I already know I will be installing Courier's POP3 daemon, and I've read that it supports CRAM-MD5. I mentioned this idea on a different mailing list, and was told that Outlook Express (which I *must* support) does not have CRAM-MD5 support. However, a friend who is knowledgeable in crypto field told me that CRAM-MD5 has been around a long time, and that he doubts that OE lacks support for it. So I'm writing with two hopes: 1) That someone will confirm or disconfirm the prior assertion that OE does not support CRAM-MD5. 2) That if such support is lacking, perhaps someone else can give me a different idea for getting rid of plaintext authentication for POP3. With thanks and regards, John -- +---------------------------------------------------------------------------+ | John Fox | System Administrator | InfoStructure | +---------------------------------------------------------------------------+ | I used to trust the media to tell me the truth, tell us the truth | | But now I've seen the payoffs everywhere I look | | Who can you trust when everyone's a crook? | | -- Queensryche, "Revolution Calling" | +---------------------------------------------------------------------------+