Re: fetchmail and plain text password

2009-12-30 Thread Victor Sudakov
Anton Shterenlikht wrote: Are you saying I can make mutt read mail directly from the imap server? Without fetchmail? Certainly. mutt is a very good IMAP client, you can do some tricky things with it like mutt -f imaps://y...@yourserver.edu/~otheruser/somefolder/somemailbox or even mutt -f

Re: fetchmail and plain text password

2009-12-30 Thread Anton Shterenlikht
On Wed, Dec 30, 2009 at 02:16:51PM +0600, Victor Sudakov wrote: Anton Shterenlikht wrote: Are you saying I can make mutt read mail directly from the imap server? Without fetchmail? Certainly. mutt is a very good IMAP client, you can do some tricky things with it like mutt -f

Re: fetchmail and plain text password

2009-12-30 Thread Victor Sudakov
Anton Shterenlikht wrote: Are you saying I can make mutt read mail directly from the imap server? Without fetchmail? Certainly. mutt is a very good IMAP client, you can do some tricky things with it like mutt -f imaps://y...@yourserver.edu/~otheruser/somefolder/somemailbox

Re: fetchmail and plain text password

2009-12-29 Thread Anton Shterenlikht
On Mon, Dec 28, 2009 at 06:35:15PM +0100, Roland Smith wrote: On Mon, Dec 28, 2009 at 03:15:53PM +, Anton Shterenlikht wrote: I use fetchmail http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-fetchmail.html to download all my mail from the Uni mail server to my fbsd box.

Re: fetchmail and plain text password

2009-12-29 Thread Victor Sudakov
Anton Shterenlikht wrote: I use fetchmail http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-fetchmail.html to download all my mail from the Uni mail server to my fbsd box. I typically run it in daemon mode, which requires having my mail server password in plain text in

Re: fetchmail and plain text password

2009-12-29 Thread Roland Smith
On Tue, Dec 29, 2009 at 11:11:50AM +, Anton Shterenlikht wrote: With these changes, only you and the superuser can read that file. yes, an attacker gaining superuser access is my worry. I'm reading Garfinkel and Spafford (1996) Practical UNIX internel security (a bit out of date, I

Re: fetchmail and plain text password

2009-12-29 Thread Jerry
On Tue, 29 Dec 2009 11:11:50 + Anton Shterenlikht me...@bristol.ac.uk replied: On Mon, Dec 28, 2009 at 06:35:15PM +0100, Roland Smith wrote: On Mon, Dec 28, 2009 at 03:15:53PM +, Anton Shterenlikht wrote: I use fetchmail

Re: fetchmail and plain text password

2009-12-29 Thread Robert Huff
Anton Shterenlikht writes: I'd be more worried that your password is sent as plaintext over the network using e.g. POP3. You should use the --ssl option if your mailserver allows it. it looks like it doesn't allow ssl. It is my understanding ISPs - at least those in the

Re: fetchmail and plain text password

2009-12-29 Thread Roland Smith
On Tue, Dec 29, 2009 at 08:03:53AM -0500, Robert Huff wrote: Anton Shterenlikht writes: I'd be more worried that your password is sent as plaintext over the network using e.g. POP3. You should use the --ssl option if your mailserver allows it. it looks like it doesn't allow

Re: fetchmail and plain text password

2009-12-29 Thread Anton Shterenlikht
On Tue, Dec 29, 2009 at 02:22:09PM +0100, Roland Smith wrote: U.S. oriented to the home user - rarely do, It's a non-trivial amount of work to get working and then monitor for correct behavior and possible breaches. Agreed. Which is exactly why I like xs4all so much. :-) They do provide

Re: fetchmail and plain text password

2009-12-29 Thread Anton Shterenlikht
On Tue, Dec 29, 2009 at 02:22:09PM +0100, Roland Smith wrote: On Tue, Dec 29, 2009 at 08:03:53AM -0500, Robert Huff wrote: Anton Shterenlikht writes: I'd be more worried that your password is sent as plaintext over the network using e.g. POP3. You should use the --ssl option if

Re: fetchmail and plain text password

2009-12-29 Thread Roland Smith
On Tue, Dec 29, 2009 at 01:44:21PM +, Anton Shterenlikht wrote: it doesn't work like that.. I think it's an imap server. Anyway, I'm trying to get in touch with them. One of the problems is that the Uni are trying to implement a system where mail is never downloaded from the main

Re: fetchmail and plain text password

2009-12-29 Thread RW
On Tue, 29 Dec 2009 15:21:30 +0100 Roland Smith rsm...@xs4all.nl wrote: In other words, a proper IMAP server does not permit plaintext passwords. No, it MUST be implemented, but only SHOULD be used. ___ freebsd-questions@freebsd.org mailing list

Re: fetchmail and plain text password

2009-12-29 Thread RW
On Tue, 29 Dec 2009 13:44:21 + Anton Shterenlikht me...@bristol.ac.uk wrote: I might be wrong, but that's my understanding. So programs like fetchmail that actually connect to their imap server and download mail to local boxes are probably not very welcome. You probably are wrong, it's

Re: fetchmail and plain text password

2009-12-29 Thread Anton Shterenlikht
On Tue, Dec 29, 2009 at 04:53:24PM +, RW wrote: On Tue, 29 Dec 2009 13:44:21 + Anton Shterenlikht me...@bristol.ac.uk wrote: I might be wrong, but that's my understanding. So programs like fetchmail that actually connect to their imap server and download mail to local boxes are

Re: fetchmail and plain text password

2009-12-29 Thread Roland Smith
On Tue, Dec 29, 2009 at 05:26:42PM +, Anton Shterenlikht wrote: Why not just point your preferred mail client at the imap server? That way you can access your mail from anywhere (probably via webmail too) Some imap clients, such as thunderbird and kmail, will let you store your server

Re: fetchmail and plain text password

2009-12-29 Thread Jerry
On Tue, 29 Dec 2009 16:53:24 + RW rwmailli...@googlemail.com articulated: BTW personally I use getmail instead of fetchmail, I've not used fetchmail much, but I've read a lot of bad things about it - some of which are mentioned here:

fetchmail and plain text password

2009-12-28 Thread Anton Shterenlikht
I use fetchmail http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-fetchmail.html to download all my mail from the Uni mail server to my fbsd box. I typically run it in daemon mode, which requires having my mail server password in plain text in .fetchmailrc I'm a little worried about

Re: fetchmail and plain text password

2009-12-28 Thread Roland Smith
On Mon, Dec 28, 2009 at 03:15:53PM +, Anton Shterenlikht wrote: I use fetchmail http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-fetchmail.html to download all my mail from the Uni mail server to my fbsd box. I typically run it in daemon mode, which requires having my