Hi all. It looks like I've hit a minor bug in Cyrus. It has to do with "allowplaintext" option.
I have set this option to "no". When I setup my client (Thunderbird) to use TLS and PLAIN, it says "Server refused... blah, blah". When I set it to use SSL and PLAIN, I can login. >From this I can only conclude that the server is not advertising AUTH=PLAIN if the connection is over TLS, while it is advertizing it over SSL. I'd say this is a bug, since TLS does/should provide SSF=256. If I understand correctly, SSL is a SSL wrapper over the connection and it gets established BEFORE IMAP connection is established. TLS, on the other hand, is initiated within an established IMAP connection. I'd say TLS code is forgetting to raise SSF to 256, upon successful establishing of encrypted communication. Nix. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ---- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html