Am 14.03.2013 06:41, schrieb pvsuja:
Hi Jan,
Thanks for your response and Sorry for this late reply. I was out of station.
And my question is why my mail client is sending the auth details in plain text? Configuration? I don't know which client you use, but in my Thunderbird you can configure between "Password, normal (plain), Crypted, Kerberos, NTLM, TLS-Certificate" (Hope this is correctly translated).
Here i use "Password, normal".
Also i can configure how the client talk the server "Connection Security: Unsecure, STARTTLS, SSL/TLS" which is set to "SSL / TLS".
how will i make sure, auth is done after starttls only?
Trust your client? Don't trust your client and listen with wireshark? Use "SSL / TLS" from the beginning?
Tell us your client, I think that would help.
Greetings, Jan