MT wrote:

According to what I've read on the TMDA website, a user who is not on the same network as the server can use TMDA via the tmda-ofmipd, but will end up sending his passwords in the clear.

Not entirely true, though you are faced with a tricky decision. A mail client talking to tmda-ofmipd can use CRAM-MD5 to encrypt the authentication, in a limited set of circumstances:


CRAM-MD5 is not compatible with remote authentication or checkpasswd authentication, only local file authentication, and then only if your password file contains the password in cleartext.

So for using tmda-ofmpid from another network, you really have three choices:

1 - Transmit the password cleartext, but use a nonessential password.

2 - Authenticate using CRAM-MD5, but be aware that the password is cleartext on the server, and so should be a nonessential password.

3 - Set up tunneling. I'm not entirely sure how to do this, maybe someone else can help you set this up.

--
Jim Ramsay


_____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users

Reply via email to