Re: securing pop3 sessions

[Russ Allbery]

Russell Nelson <[EMAIL PROTECTED]> writes:
> Len Budney writes:

>> I'm afraid the best way is also the only way, and it doesn't exist. You
>> cannot use POP3 without sending passwords in the clear.

> Doesn't anybody implement APOP??

Even better, there are innumerable different authentication mechanisms
possible once you use SASL, including ones considerably better than APOP,
and POP3 definitely supports SASL.

You can definitely use POP3 without cleartext passwords.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>