Re: Secure IMAP server

2001-01-30 Thread Andy Bradford
On Tue, 30 Jan 2001 15:32:13 +0100, Felix von Leitner wrote: > That is not sufficient. That was my point. Not having seen a security audit, nor looked at the code myself, there is not solid claim to security. > That said, I use the imapd myself. We use it here as well on production systems.

Re: Secure IMAP server

2001-01-30 Thread Felix von Leitner
Thus spake Andy Bradford ([EMAIL PROTECTED]): > While courier-imap isn't coded in the same style that DJB uses, I do > believe that it has been built with security in mind. That is not sufficient. Windows is also built with security in mind, according to Microsoft. I have not done a code audit o

Re: Secure IMAP server

2001-01-29 Thread Sam Trenholme
> Get a life, Sam. Really. Sigh, oh, sigh. I haven't heard a word from you in three years, so I thought that you, like me, completely forgot about it. For the other members of the list, I am sorry this personal spat, which I thought I had resolved with Robin three years ago, has been taken to

Re: Secure IMAP server

2001-01-29 Thread Robin S. Socha
* Sam Trenholme <[EMAIL PROTECTED]> writes: > The writers of Courier are a pedantic bunch. They reject mail with > 8-bit info in the headers and will not send mail to places with > "improperly configured MX records". Good to see you again, Sam. *sigh* Still haven't learnt anything, have you?

RE: Secure IMAP server

2001-01-29 Thread Greg Owen
> I don't know what their definition of 'improperly configured MX > records' is. I was also curious, so I took a quick scan through the sources. It appears that this means MX records pointing to recursive CNAME records. This is not apparently configurable. Courier also apparent

Re: Secure IMAP server

2001-01-29 Thread Andy Bradford
On Sun, 28 Jan 2001 23:08:06 PST, Sam Trenholme wrote: > The only security document I could find in the source tarball for > courier-0.30.0 has this note: courier is not an IMAP package but a MTA like qmail. What you need to get is courier-imap and look there... I just looked there myself and

Re: Secure IMAP server

2001-01-29 Thread Peter van Dijk
On Mon, Jan 29, 2001 at 10:26:33AM -0500, Greg Owen wrote: > > The writers of Courier are a pedantic bunch. They reject > > mail with 8-bit info in the headers and will not send mail > > to places with "improperly configured MX records". > > Next thing you know, they'll be refusing to spe

RE: Secure IMAP server

2001-01-29 Thread Greg Owen
> The writers of Courier are a pedantic bunch. They reject > mail with 8-bit info in the headers and will not send mail > to places with "improperly configured MX records". Next thing you know, they'll be refusing to speak with SMTP clients that send bare linefeeds. -- gowen -

Re: Secure IMAP server

2001-01-28 Thread Sam Trenholme
On Sun, 28 Jan 2001, Andy Bradford wrote: > For more on its security I believe there is a document called > SECURITY in the code tree somewhere which discusses it's approach to > security---you might have a look at that. The only security document I could find in the source tarball for courier-

Re: Secure IMAP server

2001-01-28 Thread Andy Bradford
Thus said Rahsheen Porter on Sun, 28 Jan 2001 23:27:14 EST: > I'm extremely happy with qmail and the other software available from > DJB, but I've yet to hear anything about an IMAP server that takes > security into consideration. I'm running Courier-IMAP right now, but I > haven't actually opene

Secure IMAP server

2001-01-28 Thread Rahsheen Porter
I'm extremely happy with qmail and the other software available from DJB, but I've yet to hear anything about an IMAP server that takes security into consideration. I'm running Courier-IMAP right now, but I haven't actually opened the port to the world yet because I'm not confident in it's securit