Re: [SM-USERS] Most secure way of authentication

On Thu, May 03, 2007 at 12:14:17PM -0700, Don Russell wrote: > My method: because https was not used (always correct) > Your method: because port 80 was used (probably correct) OK, I've got it - thank you! Rainer - This SF.

Re: [SM-USERS] Most secure way of authentication

Rainer Sokoll wrote: > On Thu, May 03, 2007 at 10:49:21AM -0700, Don Russell wrote: > >> Rainer Sokoll wrote: >> > > >>> RedirectMatch permanent ^/(.*) https://webmail.example.com/$1 >>> > > >> Though that may work in many cases, the reason I do not like it is >> because the

Re: [SM-USERS] Most secure way of authentication

On Thu, May 03, 2007 at 02:43:41PM -0400, Daniel Kahn Gillmor wrote: > Don is pointing out that the case where this is triggered (inside the > VirtualHost :80 container) doesn't guarantee that https is actually > not being used. That is correct, but the subscribed people here are admins - they sh

Re: [SM-USERS] Most secure way of authentication

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu 2007-05-03 14:36:39 -0400, Rainer Sokoll wrote: > On Thu, May 03, 2007 at 10:49:21AM -0700, Don Russell wrote: >> Rainer Sokoll wrote: > >> > RedirectMatch permanent ^/(.*) https://webmail.example.com/$1 > >> Though that may work in many case

Re: [SM-USERS] Most secure way of authentication

On Thu, May 03, 2007 at 10:49:21AM -0700, Don Russell wrote: > Rainer Sokoll wrote: > > RedirectMatch permanent ^/(.*) https://webmail.example.com/$1 > Though that may work in many cases, the reason I do not like it is > because the issue is not to change a request on port 80 to port 443,the

Re: [SM-USERS] Most secure way of authentication

Rainer Sokoll wrote: > On Wed, May 02, 2007 at 03:41:19PM -0700, Don Russell wrote: > > >> >> RewriteEngine on >> RewriteCond %{HTTPS} =off >> RewriteRule .* https://%{SERVER_NAME}/webmail/ [R,L] >> >> > > Or, without mod_rewrite: > > > ServerName webmail.example.com > Redi

Re: [SM-USERS] Most secure way of authentication

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric DV wrote: > Dear Squirrelmail experts, > I have a small home server debian based, with postfix/dovecot/squirrelmail > installed locally and working. Dovecot is used non-secured (no imaps) but > only on the 192.168.0.100 address (address of the ser

Re: [SM-USERS] Most secure way of authentication

On Wed, May 02, 2007 at 03:41:19PM -0700, Don Russell wrote: > > RewriteEngine on > RewriteCond %{HTTPS} =off > RewriteRule .* https://%{SERVER_NAME}/webmail/ [R,L] > Or, without mod_rewrite: ServerName webmail.example.com RedirectMatch permanent ^/(.*) https://webmail.example.c

Re: [SM-USERS] Most secure way of authentication

Eric DV wrote: > Dear Squirrelmail experts, > I have a small home server debian based, with postfix/dovecot/squirrelmail > installed locally and working. Dovecot is used non-secured (no imaps) but > only on the 192.168.0.100 address (address of the server on the local > network). I want to use squi

Re: [SM-USERS] Most secure way of authentication

On 2-mei-2007, at 13:23, Eric DV wrote: > > Dear Squirrelmail experts, > I have a small home server debian based, with postfix/dovecot/ > squirrelmail > installed locally and working. Dovecot is used non-secured (no > imaps) but > only on the 192.168.0.100 address (address of the server on the

[SM-USERS] Most secure way of authentication

Dear Squirrelmail experts, I have a small home server debian based, with postfix/dovecot/squirrelmail installed locally and working. Dovecot is used non-secured (no imaps) but only on the 192.168.0.100 address (address of the server on the local network). I want to use squirrelmail to read my emai