🚀 go-pugleaf

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig5B331CDDCE56A90AA8749F1B
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Chris Naden wrote:
> Recently, Brian said something like:
> 
> : Is there a secure way of sending host/password for POP3 account to the demon
> : (or any) mail servers ie not plain text.
> 
> With regard to the second question (or any), yes: a consultation
> of /etc/services indicates:
> 
> pop3s           995/tcp spop3           # pop3 protocol over TLS/SSL
> 
> I know it works because I use it privately.

I use SPOP3 as well.

I'm sure Chris knows, but there are other POP3 authentication protocols
that are fairly widely supported, these also ensure the password is not
revealed.

APOP, and POP3 with TLS (which probably ought to replace SPOP3 but I
haven't used it yet) are probably the best known, but there are plenty
of other less well trodden paths.

> With regard to the second question, to the best of my knowledge,
> Demon do not operate a secure POP3 service.

A quick poke at the server suggests Demon don't yet support APOP or POP3
over TLS either.

SPOP3 is the quick and dirty one to implement (which for Demon is
probably still quite a significant task) - as it doesn't necessarily
require any changes to your POP3 server - it just eats more CPU (and
creates more support calls).

--------------enig5B331CDDCE56A90AA8749F1B
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAMmJUGFXfHI9FVgYRApuHAJ93Tf4CkI4GSItgLQl4uhu4C+R2SwCdGIW1
swcq9LzYTROm0e3V3ZpzN8c=
=9OpY
-----END PGP SIGNATURE-----

--------------enig5B331CDDCE56A90AA8749F1B--