Date: Wed, 24 Apr 2002 23:26:31 -0700 From: "Crist J. Clark" <cjc@FreeBSD.ORG> To: Nik Clayton <nik@FreeBSD.ORG> Cc: Terry Lambert <tlambert2@mindspring.com>, chat@FreeBSD.ORG Subject: Re: IMAP server recommendations Message-ID: <20020424232631.C30779@blossom.cjclark.org> In-Reply-To: <20020424201106.N30474@canyon.nothing-going-on.org>; from nik@FreeBSD.ORG on Wed, Apr 24, 2002 at 08:11:06PM %2B0100 References: <20020424074820.K30474@canyon.nothing-going-on.org> <3CC68B68.A07C1D97@mindspring.com> <20020424201106.N30474@canyon.nothing-going-on.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 24, 2002 at 08:11:06PM +0100, Nik Clayton wrote:
> On Wed, Apr 24, 2002 at 03:39:36AM -0700, Terry Lambert wrote:
> > Nik Clayton wrote:
> > > I'm in need of an IMAP server.
> >
> > I generally recommend Cyrus. The U of Washington server has a
> > lot of holes in it that result in NULL pointer dereferences in
> > obscure cases.
>
> Probably not a problem. I'm either going to be accessing it from hosts
> on the same network, which are trusted, or with a web based front end
> which will be secured with SSL.
It's also really, really easy to set up IMAP over SSL (imaps 993/tcp)
using WU-IMAP and stunnel(8).
But note that SSL doesn't really protect the server. SSL doesn't
authenticate the client, so anyone who has TCP/IP connectivity to port
993/tcp can still access the server. (But since your username and
password are encrypted, it helps keep people from sniffing, stealing
the pair, and exploiting server bugs that may only be accessible after
a user has authenticated.)
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020424232631.C30779>