From owner-freebsd-isp@FreeBSD.ORG Tue Apr 13 10:40:34 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C19F116A4CE for ; Tue, 13 Apr 2004 10:40:34 -0700 (PDT) Received: from quip.cz (www.quip.cz [62.24.67.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0E74243D53 for ; Tue, 13 Apr 2004 10:40:34 -0700 (PDT) (envelope-from 000.fbsd@quip.cz) Received: from quip.cz (qwork.quip.test [192.168.1.2]) by quip.cz (QuipMail) with ESMTP id 400ED2E01D for ; Tue, 13 Apr 2004 19:40:32 +0200 (CEST) Message-ID: <407C2612.8080509@quip.cz> Date: Tue, 13 Apr 2004 19:40:34 +0200 From: Miroslav Lachman <000.fbsd@quip.cz> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040316 X-Accept-Language: cs, cz, en, en-us MIME-Version: 1.0 To: freebsd-isp@freebsd.org References: <20040413170226.GH6087@mind.net> In-Reply-To: <20040413170226.GH6087@mind.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: CRAM-MD5 support in Outlook Express? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Apr 2004 17:40:34 -0000 This link could be useful for you http://www.security.nnov.ru/advisories/oespa.asp "Outlook Express doesn't support CRAM-MD5 or APOP..." I agree with Tim Wilde - SSL can solve this problem. Miroslav Lachman John Fox wrote: > Hello, > > We're a small ISP (~13,000 email accounts) and I would really like to see > us move away from cleartext passwords for our POP3 service. I am currently > interested in using CRAM-MD5 authentication, as I already know I will be > installing Courier's POP3 daemon, and I've read that it supports CRAM-MD5. > > I mentioned this idea on a different mailing list, and was told that > Outlook Express (which I *must* support) does not have CRAM-MD5 support. > However, a friend who is knowledgeable in crypto field told me that > CRAM-MD5 has been around a long time, and that he doubts that OE lacks > support for it. > > So I'm writing with two hopes: > > 1) That someone will confirm or disconfirm the prior assertion that > OE does not support CRAM-MD5. > > 2) That if such support is lacking, perhaps someone else can give > me a different idea for getting rid of plaintext authentication > for POP3. > > With thanks and regards, > > John > -- > +---------------------------------------------------------------------------+ > | John Fox | System Administrator | InfoStructure | > +---------------------------------------------------------------------------+ > | I used to trust the media to tell me the truth, tell us the truth | > | But now I've seen the payoffs everywhere I look | > | Who can you trust when everyone's a crook? | > | -- Queensryche, "Revolution Calling" | > +---------------------------------------------------------------------------+ > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" > -- Miroslav Lachman Webapplication Developer