[Dovecot] Encrypted IMAP only from Internet, unencrypted POP3 from internal network

[Rainer Frey]

On Monday 08 May 2006 16:50, Timo Sirainen wrote:
> On Mon, 2006-05-08 at 16:34 +0200, Rainer Frey wrote:
> > Phew - good point. I just checked with a test installation and
> > KMail an Thunderbird. KMAil and Thunderbird 1.0.8 both ask for
> > CAPABILITY, Dovecot sends (among others) LOGINDISABLED, and both
> > send a login command with cleartext password nontheless.
>
> Reporting it as a kmail bug could be a good idea..

I'll do that.

> > Thunderbird 1.5 does not try this, it sends logout after it
> > retrieves the LOGINDISABLED capability.
>
> But then again Thunderbird 1.5 can't understand that after STARTTLS
> the LOGINDISABLED capability isn't there anymore..

Argh!!! I didn't try that.

Rainer
-- 
Software Development
------------------------------------------------------
Inxmail GmbH
Kaiser-Joseph-Str. 274, 79098 Freiburg, Germany