OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jason Baker (jbakerfilonet.ca)
Date: Fri Jan 18 2002 - 20:02:53 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On January 18, 2002 04:24 pm, you wrote:
    > On Friday 18 January 2002 20:43, Tzafrir Cohen wrote:
    > > > Using SSL is fine for protecting passwords. For protecting the emails
    > > > themselves, you need to use GPG or something similar.
    > >
    > > Actually: not only the passwords. All the traffic. If you want to protect
    >
    > No, only the passwords. Any email you collect via POP or IMAP over SSL
    > could easily have been sniffed before it arrived in your account via
    > SMTP. So, in effect, using SSL in this way only secures your password.
    > You still need GPG or PGP. And not many ISPs support SSL anyway.

    Unless, of course, your ISP and the senders ISP both have MTA's that support
    TLS. That one is in my "one of these days" files. :)

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
    message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure,
    go to http://www.mandrakesecure.net/.