Thanks for the clarification. I guess I will use TLS on top of PLAIN.
Well, that won't change anything (I mean, sasl is not involved so using tls won't mean changing sasl configuration). If you want to avoid cyrus-imapd advertising plaintext authentication over an insecure link (i.e. before tls has been negotiated) you can add
allowplaintext: no
in /etc/imapd.conf
Bye -- - Yo también quiero una Europa libre de Patentes de Software - - I want a Software Patents Free Europe too! And you? - --------------------------------------------------------------- EuropeSwPatentFree - http://EuropeSwPatentFree.hispalinux.es
pgp00000.pgp
Description: PGP signature
