Secure Email

[Brian]

Hi,
Is there a secure way of sending host/password for POP3 account to the demon
(or any) mail servers ie not plain text.

TIA
Brian

[Chris Naden]

Recently, Brian said something like:

: Is there a secure way of sending host/password for POP3 account to the demon

: (or any) mail servers ie not plain text.

With regard to the second question (or any), yes: a consultation
of /etc/services indicates:

pop3s 995/tcp spop3 # pop3 protocol over TLS/SSL

I know it works because I use it privately.

With regard to the second question, to the best of my knowledge,
Demon do not operate a secure POP3 service.

~cHris
--
Chris Naden - chris.naden at thus.net
Data Network Design Engineer O

"That was Zen. This is Tao." O O

[Simon Waters]

Chris Naden wrote:
> Recently, Brian said something like:
>
> : Is there a secure way of sending host/password for POP3 account to the demon
> : (or any) mail servers ie not plain text.
>
> With regard to the second question (or any), yes: a consultation
> of /etc/services indicates:
>
> pop3s 995/tcp spop3 # pop3 protocol over TLS/SSL
>
> I know it works because I use it privately.

I use SPOP3 as well.

I'm sure Chris knows, but there are other POP3 authentication protocols
that are fairly widely supported, these also ensure the password is not
revealed.

APOP, and POP3 with TLS (which probably ought to replace SPOP3 but I
haven't used it yet) are probably the best known, but there are plenty
of other less well trodden paths.

> With regard to the second question, to the best of my knowledge,
> Demon do not operate a secure POP3 service.

A quick poke at the server suggests Demon don't yet support APOP or POP3
over TLS either.

SPOP3 is the quick and dirty one to implement (which for Demon is
probably still quite a significant task) - as it doesn't necessarily
require any changes to your POP3 server - it just eats more CPU (and
creates more support calls).