[Dovecot] imapproxy

Timo Sirainen tss at iki.fi
Sun Sep 11 15:05:44 EEST 2005


On Wed, 2005-09-07 at 06:45 -0700, Marc Perkel wrote:
> > imapproxy maintains a stateful connection between the imap server
> > and the web server, so that a reconnection/authentication to imap
> > isn't needed every time the webmail user does something.  Saves
> > cpu cycles bigtime...
> >
> > BTW: we use horde/imp for our webmail
> >
> Is it hard to install? Is there any down side to it?

Just don't let regular users connect to it. Its design is to run
everything in one process, so a security hole in it could give the
attacker full access everyone's IMAP traffic. If only trusted webmail
app can access it, there are a lot less potential ways to break it.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20050911/f0194561/attachment.pgp


More information about the dovecot mailing list