At 5/16/2002 10:10 PM -0400, Mike Burger wrote:
>On Thu, 16 May 2002, Anthony E. Greene wrote:
> >
> > Because POP before SMTP is a kludge. SMTP AUTH is part of the standard.
> >
>
>But Pop-Before-SMTP utilizes existing, easily implementable standards.
>
>Not all mailers understand or can make use of SMTP AUTH, and it's not
>necessarily an easy thing to properly implement.

Incorrect, Brother Burger. Deeply, profoundly incorrect.

SMTP AUTH is a standard, defined via RFC as standards are. It therefore 
meets your "existing" criterion. It is also extremely easy to implement 
(meeting your second criterion).

Any user with enough "skill" (loosely defined) to modify sendmail.mc and 
allow their mailserver to receive connections from the network can also 
uncomment the following three lines (straight from the stock sendmail.mc):

define(`confAUTH_OPTIONS', `A')dnl
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl

Then restart sendmail; that's all there is to it.

On the other hand, POP-before-SMTP is not a standard or anything close to 
it. It is a kludge (albeit a useful kludge) which was implemented during 
the interval _after_ SMTP AUTH was defined but _before_ most mailers 
supported it. Note that LookOut, LookOut Express, Eudora, Evolution, KMail, 
and even pine support SMTP AUTH. Whichever mailers don't support it, are 
simply broken.

I also don't find it easier to implement. Additional packages, additional 
databases, also having to modify sendmail.mc, and the fact that all my 
users scream about their mail not leaving their computer, the grief about 
having to constantly check mail twice, etc... all these things tell me that 
POP-before-SMTP is not my friend.


-- 
Rodolfo J. Paiz
[EMAIL PROTECTED]



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to