BBC 'vague' reporting again!

Ian Batten ukcrypto at chiark.greenend.org.uk
Wed, 3 Dec 2008 23:02:33 +0000


On 3 Dec 2008, at 21:57, Benjamin Donnachie wrote:

> 2008/12/3 Paul Vigay <ukcrypto@vigay.com>:
>> The problem with POP3 and IMAP is they send the password as  
>> cleartext,
>
> I configured my mail server (cyrus) to only accept plaintext passwords
> over encrypted links - anything else was rejected.

The option is ``allowplaintext: 0''.

You might want ``tls_cipher_list: MEDIUM:HIGH:!3DES'' in order to  
prevent some of the rubbish encryption modes but avoid burning all  
your cycles.

ian