Date: Wed, 29 May 2002 19:43:38 -0700 (Pacific Daylight Time) From: Mark Crispin <[EMAIL PROTECTED]> [...] > (2) Require implementation of DIGEST-MD5. > This is not as widely deployed
AFAIK it is completely undeployed in the IMAP world. I took a look at DIGEST-MD5 and was horrified. It is NOT a simple mechanism to implement. There is quite a bit about it which requires careful consideration to get right (think buffer overflow exploits). All those optional and variable-length fields are a major pain, and quoted strings make it a further nightmare. I agree DIGEST-MD5 is complex. However, LDAP requires it; I think there's some utility in having the same mandatory-to-implement mechanism as LDAP. > Both options have open-source code available and many existing > IMAP servers already comply. Perhaps there are IMAP servers which have it, but I haven't seen any; and I know of no clients which have it. Some random clients: Mulberry, GNUS, Mutt Servers: Cyrus. iPlanet and/or Netscape has demonstrated it---I don't know if the latest shipping version has it. Larry
