OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: Re: IMAP- how to protect a server?

Re: IMAP- how to protect a server?

Aaron D. Turner (aturnervicinity.com)
Tue, 8 Jun 1999 09:31:05 -0700 (PDT)

Ah. I think that's the bit of info I needed. Thanks Ge'. Next
question: Anyone have a matrix showing the IMAP clients and servers
that support SSL/client certs and actually work with each other? I'm
sure there's one on the web somewhere... 

-- 
Aaron Turner, CNE   aturnervicinity.com  650.237.0311 x252
Network Engineer    Vicinity Corp.        http://www.vicinity.com
Email-to-page: 6505721411.1146752pagenet.net [Subject & Body sent]

On Mon, 7 Jun 1999, Ge' Weijers wrote:

> On Sat, Jun 05, 1999 at 01:10:42AM -0400, Carric Dooley wrote:
> > I have been watching this thread... and I can't see how SSL protects the
> > server.  That would protect (to a degree) the content of the e-mail and
> > users passwords to the server, but not the server itself.  
> 
> If you _require_ the use of client certificates only legitimate users
> can connect to the IMAP server. This keeps most people from connecting
> to you IMAP server altogether. This differs from the common use of SSL
> on the web, where only the server has a certificate, and the client is
> essentially anonymous.
> 
> Ge'
> 
> -- 
> -
> Ge' Weijers                                Voice: (614)326 4600
> Progressive Systems, Inc.                    FAX: (614)326 4601
> 2000 West Henderson Rd. Suite 400, Columbus OH 43220
>

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:19:00 CDT