On Sun, Aug 20, 2000 at 05:01:02PM +0800, HuangChun wrote:
> When qmail implement the APOP pop3 command, it does not use the MD5
> encryption to check the user's md5-digest-string. However, RFC1321 tell
> us it shoud do that.
Umm. qmail-pop3d just passes the authentication tokens to some program
like checkpassword. checkpassword doesn't handle APOP responses, by the
way, so you need to use an authenticating program that does.
Would you like to write one and contribute it to qmail.org? :-)
---Chris K.
--
Chris, the Young One |_ heartbleed (OpenBSD/i386) has now been up for
Auckland, New Zealand |_ all of 16 days, 03:54:38
http://cloud9.hedgee.com/ |_
