PDA

View Full Version : [Request] Support for APOP



j103c
10-21-2004, 12:17 PM
I would like to request support for APOP (http://www.cse.ohio-state.edu/cgi-bin/rfc/rfc1939.html#page-15) to encrypt POP3 passwords.

This would prevent account hijacking through network sniffing attacks of clear-text passwords, which would be extremely bad if 'admin' account passwords were captured.

Some other form of encryption like CRAM-MD5, TLS or SSL would be acceptable as well.

jpc
11-24-2004, 07:26 AM
yah, that would be nice indeed....

but a good reason never to send the 'root' pwd over an unencrypted line....

Anyone else for APOP?