Re: Secure it up a bit please...

[Jason Costomiris]

On Fri, Dec 10, 1999 at 09:30:28AM +1100, Dan Horth wrote:
: I know that Eudora supports Kerberos and APOP authentication as well 
: as cleartext passwords... I was just wondering if either of these 
: options are more secure, and if so how would I go about setting up 
: our server to use these.

Kerberos can be a nightmare to setup.  Don't do it unless you're really 
sure, and want all of that extra overhead.

If you use APOP, you'll have to store the users' passwords in the clear on
the server.  Authentication is accomplished by using an MD5 challenge
and response, similar to CHAP authentication on a PPP link.

Want the best of all worlds?  IMAP tunnelled inside SSH, or using CRAM-MD5
authentication.

Eudora Pro 4.x supports IMAP.

-- 
                 Jason Costomiris <><
            Technologist, cryptogeek, human.
jcostom {at} jasons {dot} org  |  http://www.jasons.org/


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.