Re: which pop3/imap secure method should I use?

2005-06-14 Thread Demonen
> What's this MiTM attact means? Man in The Middle is when someone "between" you and the remote system modifies packets on their way to the remote system or back, IIRC -- Fredrik "Demonen" Vold /* - Do not meddle in the affairs of dragons, for you are crunchy and good with ketchup. */

Re: which pop3/imap secure method should I use?

2005-06-14 Thread LeVA
2005. június 14. 07:57, Radu Spineanu <[EMAIL PROTECTED]> -> debian-security@lists.debian.org,: > Ian Eure wrote: > >> On Monday 13 June 2005 04:41 pm, LeVA wrote: > >> I don't see why it would be helpful, unless you're trying to keep > > your info > > >> secret from a determined/resourceful attack

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Radu Spineanu
Ian Eure wrote: >> On Monday 13 June 2005 04:41 pm, LeVA wrote: >> I don't see why it would be helpful, unless you're trying to keep your info >> secret from a determined/resourceful attacker. But an attacker like that >> would probably get it anyways. >> >> I use TLS & PLAIN, and encrypt/sign my m

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:41 pm, LeVA wrote: > 2005. június 14. 01:36, > Ian Eure <[EMAIL PROTECTED]> > > > PLAIN is easier to set up. IIRC, CRAM-MD5 requires a seperate password > > file. Shouldn't be a risk if you're only using PLAIN over TLS. > > I understand that with TLS or SSL the clear text

Re: which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
2005. június 14. 01:36, Ian Eure <[EMAIL PROTECTED]> -> debian-security@lists.debian.org,: > On Monday 13 June 2005 04:23 pm, LeVA wrote: > > Hi! > > > > I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) > > support. Now I can not decide which combination of methods is the most >

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:23 pm, LeVA wrote: > Hi! > > I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) > support. Now I can not decide which combination of methods is the most > secure (first of all) and most usefull (lastly) for me. > > The courier server supports both SSL and

which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
Hi! I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) support. Now I can not decide which combination of methods is the most secure (first of all) and most usefull (lastly) for me. The courier server supports both SSL and TLS, and I can use PLAIN and CRAM-MD5 methods for auth