[Dovecot] Re: Encrypted IMAP only from Internet, unencrypted POP3 from internal network

[Jef Driesen]

Timo Sirainen wrote:
> On Mon, 2006-05-08 at 16:34 +0200, Rainer Frey wrote:
>> Phew - good point. I just checked with a test installation and KMail an 
>> Thunderbird. KMAil and Thunderbird 1.0.8 both ask for CAPABILITY, 
>> Dovecot sends (among others) LOGINDISABLED, and both send a login 
>> command with cleartext password nontheless.
> 
> Reporting it as a kmail bug could be a good idea..
> 
>> Thunderbird 1.5 does not try this, it sends logout after it retrieves 
>> the LOGINDISABLED capability.
> 
> But then again Thunderbird 1.5 can't understand that after STARTTLS the
> LOGINDISABLED capability isn't there anymore..

That issue will be fixed with Thunderbird 1.5.0.4, see bugreport 
https://bugzilla.mozilla.org/show_bug.cgi?id=312009.