> Yes, Postgres supports SSL but cyrus and postfix insist to give the > cleartext password through sasl which builds the query string (the SELCT) > with the cleartext password. Do someone know if it is possible to wrap > sssl around that? Is stunnel the mean of choice here?
Yes, read the postgres docs. If you use SSL connections, it'll be encrypted on the wire. The problem though is that you're still storing the passwords in plain text in the database, which is bad. It may be a matter of configuring the authentication method that Cyrus is using with the *IMAP clients* to use, say, SASL instead of PLAIN. If you're concerned about the traffic between the IMAP server and the database, you should be at least as concerned about the traffic between the IMAP server and your IMAP clients. > Radius to machine account is encrypted and unfortunately I don't speak any > LDAP (yet). Learning LDAP isn't all that easy, but it isn't the most difficult thing, either. John -- John Madden Sr. UNIX Systems Engineer Ivy Tech Community College of Indiana [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@lists.sourceforge.net List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id)95 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
