Re: ISP setup

[Craig Sanders <cas@taz.net.au>]

On Tue, Feb 28, 2006 at 07:55:01AM -0500, charlie derr wrote:
> > 1. don't use uw-imapd. ever. it's garbage. if you want a pop/imap
> > daemon that supports both mbox and Maildir (as well as both SSL
> > encrypted and unencrypted connections), then use Dovecot. Courier's
> > OK too if you just need Maildir support, but i prefer Dovecot.
>
> Craig, Would your answer be different if the goal was to only support
> SSL-encrypted pop/imap connections? (no unencrypted traffic)

nope.  don't use uw-imapd.  ever.  it's garbage.



encryption is a separate issue.  encrypted POP/IMAP connections are,
obviously, safer than unencrypted.

encryption of connections is important even within your own network - if
one machine is compromised (or if someone of dubious ethics has access
to the network - disgruntled employee, dodgy contractor, whatever), a
sniffer can gather passwords from within your network. 

for example, this is why you should never use unencrypted telnet logins,
only ssh or ssl-telnet, even within your own LAN.

craig

-- 
craig sanders <cas@taz.net.au>           (part time cyborg)