Allow plaintext and TLS

From: Nikola Milutinovic (no email)
Date: Mon Apr 03 2006 - 06:00:08 EDT

  • Next message: Scott Bronson: "Re: Strange mail appeared in one of mailboxes"

    Hi all.

    It looks like I've hit a minor bug in Cyrus. It has to do with "allowplaintext"
    option.

    I have set this option to "no". When I setup my client (Thunderbird) to use TLS
    and PLAIN, it says "Server refused... blah, blah". When I set it to use SSL and
    PLAIN, I can login.

    >From this I can only conclude that the server is not advertising AUTH=PLAIN if
    the connection is over TLS, while it is advertizing it over SSL. I'd say this
    is a bug, since TLS does/should provide SSF=256.

    If I understand correctly, SSL is a SSL wrapper over the connection and it gets
    established BEFORE IMAP connection is established. TLS, on the other hand, is
    initiated within an established IMAP connection. I'd say TLS code is forgetting
    to raise SSF to 256, upon successful establishing of encrypted communication.

    Nix.

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com

    ----
    Cyrus Home Page: http://asg.web.cmu.edu/cyrus
    Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
    List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
    

  • Next message: Scott Bronson: "Re: Strange mail appeared in one of mailboxes"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD