On Fri, 10 Mar 2006, Hugh Sasse wrote:

> > Server mode is only risky under the following circumstrances:
> >
> > 1: Access is made via POP3 and local disk (or a non-compatible imap3 server)
> >    which use non-compatible locking methods.
> >
> > 2: Clients _simultaneously_ access using both methods.

> OK, then I will certainly enable it for the large users. It's just
> that usage patterns are a "known unknown", and I'm reluctant to get
> caught by the "unknown unknowns" :-)

If your users are using simultaneous POP3 accesses, server mode is safe,
it's only when differing modes are used that the risk is there - such as
when a user has a local login and is running Pine/Elm/whatever in local
disk mode, as well as using a POP3 client.

-- 
      If a person, or organisation, starts to play on your fears
      it may be that person or organisation that you should fear.

Reply via email to