Of course, everything between the client and SM is encrypted by
SSL, but I don't think the stuff between SM and IMAP is. And the original
writer wanted to keep unencrypted stuff off the LAN between SM and the
IMAP server. I'm running SM and IMAP server on the same machine, so this
is not an issue. However, I was always concerned about passwords in the
clear between SM and the client, so I ran SM under SSL. That is until the
hole in Open SSL was exploited and brought that machine down (or at least
overlaoded the router with port 2002 traffic). I'm in the process of
migrating one machine to RH8.0. The machine running RH7.3 (and the SSL
hole) now has port 443 blocked at the router so I can use SM on the LAN,
but use pine over SSH from the outside world (where I am now).
Are others generally running SM over SSL?
Harold
On Thu, 31 Oct 2002, Ben Sabini wrote:
> By pushing SM to https, wouldnt that will do the trick ?
> I mean once you are on https, everything is encrpted.
>
> --- Chris Hilts <[EMAIL PROTECTED]> wrote:
> > > My IMAP-server is not on the same box as SM is running. To avoid
> > sending
> > > cleartext passwords over my LAN is it possible to configure SM to
> > use
> > > IMAP/SSL instead? (I'm runninge Courier-IMAP 1.5.3 with OpenSSL
> > 0.9.6g)
> >
> > I'm working on support for this right now. Unfortunately, it requires
> > PHP
> > 4.3.x, which is a little too bleeding-edge for most people's tastes.
> > (Hint: I haven't switched to 4.3.x yet) In the meantime, you can try
> > using sslwrap. Check http://www.rickk.com/sslwrap/
> >
> > Hope this helps,
> >
> > Chris Hilts
> > [EMAIL PROTECTED]
>
>
> =====
> ......
> Benjamin Sabini
> [EMAIL PROTECTED]
>
>
> __________________________________________________
> Do you Yahoo!?
> HotJobs - Search new jobs daily now
> http://hotjobs.yahoo.com/
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Influence the future
> of Java(TM) technology. Join the Java Community
> Process(SM) (JCP(SM)) program now.
> http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en
> --
> squirrelmail-users mailing list
> List Address: [EMAIL PROTECTED]
> List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>
-------------------------------------------------------
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
