- Previous message: Daniel Aquino: "Authentication"
- Maybe in reply to: Guillermo Gómez: "digets md5 without tls ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
|
|
|
From: Jorey Bump (no email)
Date: Tue Dec 04 2007 - 18:11:11 EST
Guillermo Gómez wrote, at 12/04/2007 04:55 PM:
> My first question is regarding digest-md5 authentication and tls, can
> it be done without the tls layer?
Yes. You can do this to offer some means of encrypting authentication
without requiring TLS. It (typically) does not encrypt the rest of the
message, though, which will be downloaded in the clear. If you do this,
make sure you do not also offer PLAIN or LOGIN authentication without TLS.
---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|