BBC 'vague' reporting again!
Ian Batten
ukcrypto at chiark.greenend.org.uk
Wed, 3 Dec 2008 23:02:33 +0000
On 3 Dec 2008, at 21:57, Benjamin Donnachie wrote:
> 2008/12/3 Paul Vigay <ukcrypto@vigay.com>:
>> The problem with POP3 and IMAP is they send the password as
>> cleartext,
>
> I configured my mail server (cyrus) to only accept plaintext passwords
> over encrypted links - anything else was rejected.
The option is ``allowplaintext: 0''.
You might want ``tls_cipher_list: MEDIUM:HIGH:!3DES'' in order to
prevent some of the rubbish encryption modes but avoid burning all
your cycles.
ian