From owner-freebsd-questions Thu Nov 16 13:19: 8 2000 Delivered-To: freebsd-questions@freebsd.org Received: from guru.mired.org (okc-65-26-235-186.mmcable.com [65.26.235.186]) by hub.freebsd.org (Postfix) with SMTP id 29DAC37B479 for ; Thu, 16 Nov 2000 13:19:05 -0800 (PST) Received: (qmail 69120 invoked by uid 100); 16 Nov 2000 21:18:59 -0000 From: Mike Meyer MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14868.20291.228145.950560@guru.mired.org> Date: Thu, 16 Nov 2000 15:18:59 -0600 (CST) To: gdunn@mac.com Cc: Greg Lehey , questions@FreeBSD.ORG Subject: Re: Pop passwords (Was: Recent Virus Attacks) In-Reply-To: <00111609300200.01787@shf102107.hi.pac.army.mil> References: <14856.46038.640800.870554@guru.mired.org> <00111609300200.01787@shf102107.hi.pac.army.mil> X-Mailer: VM 6.75 under 21.1 (patch 10) "Capitol Reef" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Gary Dunn types: > On Tue, 07 Nov 2000, Mike Meyer wrote: > > Both POP and IMAP protocols have features that let you avoid sending > > passwords in the clear. Fetchmail implements a fair collection of them > > from the client side. I'm not sure what cucipop supports from the > > server side. I > Is there a simple way to determine whether or not passwords are going out clear > text? Can I look for something in a log file? Well, if you didn't do something to enable passwords other than as clear text, they are almost certainly going out as clear text. Whether any clues wind up in your log file will depend on your software. The best bet is to read through the documentation for your client on the subject, then check to see which methods it supports are supported by your ISP's POP or IMAP servers.