Re: [BAWUG] Boingo and Email

[Julian Bond]

Stuart Henderson <[EMAIL PROTECTED]> wrote:

uh-huh... no SSL, so your Boingo ID+Password are sent in clear. That's
not good.

Have you confirmed it's actually clear? SMTP AUTH supports at least
Plaintext, CRAM-MD5, DIGEST-MD5 and NTLM, independent of the channel
(SSL or clear). You would have to be using plaintext over a clear
channel to expose passwords this way.

From the Boingo docs on configuring Outlook Express. Set:-
- My server requires Authentication
- Ensure Logon Using Secure Password Authentication is NOT checked
- Ensure the option right below (This server requires a secure connection (SSL)) is NOT checked

So it's SMPT AUTH in plaintext.

BTW. People on this list frequently reply to sender as well as the list
which I find mildly irritating. As long as it's easy, please don't reply
to me as well. But don't sweat it.

You could set "Reply-To: [EMAIL PROTECTED]" on your posts...

Without starting a huge debate about it, I was surprised to find that Mailman for this list is not configured to do this automatically. I'll see if I can persuade my MUA to do it for me.

--
Julian Bond Email&MSM: [EMAIL PROTECTED]
Webmaster: http://www.ecademy.com/
Personal WebLog: http://www.voidstar.com/
CV/Resume: http://www.voidstar.com/cv/
M: +44 (0)77 5907 2173 T: +44 (0)192 0412 433
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless