Re: ISP setup
On Tue, Feb 28, 2006 at 07:55:01AM -0500, charlie derr wrote:
> > 1. don't use uw-imapd. ever. it's garbage. if you want a pop/imap
> > daemon that supports both mbox and Maildir (as well as both SSL
> > encrypted and unencrypted connections), then use Dovecot. Courier's
> > OK too if you just need Maildir support, but i prefer Dovecot.
> Craig, Would your answer be different if the goal was to only support
> SSL-encrypted pop/imap connections? (no unencrypted traffic)
nope. don't use uw-imapd. ever. it's garbage.
encryption is a separate issue. encrypted POP/IMAP connections are,
obviously, safer than unencrypted.
encryption of connections is important even within your own network - if
one machine is compromised (or if someone of dubious ethics has access
to the network - disgruntled employee, dodgy contractor, whatever), a
sniffer can gather passwords from within your network.
for example, this is why you should never use unencrypted telnet logins,
only ssh or ssl-telnet, even within your own LAN.
craig sanders <firstname.lastname@example.org> (part time cyborg)