OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: ElWolfie (elwolfie_at_elwolfie.com)
Date: Tue Aug 06 2002 - 07:37:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > Um, why? Provided you set up encrypted password authentication (I use
    > CRAM5), surely there's no need to encrypt POP access? After all, all the
    > data that's going to be transmitted to the machine arrived there via
    > plain-text SMTP anyway. Adding an extra encryption layer is pointless
    > and just makes things slower...
    >
    > (Unless, of course, you actually have a need for it, such as mail that's
    > arrived via a secure internal LAN or encrypteded SMTP, or you want to
    > hide details of when you read what. But I'm thinking in the general case
    > here.)
    >

    Well, restricting pop3 access (any service that is used by just a few
    people) would make it harder to sniff/break/exploit for a potential
    attacker wouldn't it?