[PLUG] Any cyrus imap/sasl experts among us?

[Sasha Romanosky]

If you say so. I still couldn't find any practical reason to use it. 

sasha

> -----Original Message-----
> From: plug-admin at lists.pdxlinux.org 
> [mailto:plug-admin at lists.pdxlinux.org] On Behalf Of Wil Cooley
> Sent: Wednesday, May 19, 2004 7:32 PM
> To: plug
> Subject: RE: [PLUG] Any cyrus imap/sasl experts among us?
> 
> 
> On Wed, 2004-05-19 at 19:04, Sasha Romanosky wrote:
> > Fwiw,
> > I had sasl setup for ldap and smtp but dropped it for lack of real
> > purpose, or benefit over ssl.
> 
> You can't really compare the two; while some of their 
> capabilities overlap, the combination of the two is usually 
> the easiest and most effective.  For example, if you're only 
> using SSL protect SMTP relaying, then you're basically an 
> open relay waiting to happen.  Currently, no one is 
> exploiting this kind of setup since it's fairly rare, but the 
> potential for abuse remains.  And if you want to authenticate 
> with Cyrus IMAP, you haven't any choice but to use SASL, 
> although if you're using PAM or passwd/shadow authentication, 
> you really need to use SSL also to protect your login and you 
> protect your data in doing so.
> 
> Wil
> -- 
> Wil Cooley                          mailto:wcooley at nakedape.cc
> Naked Ape Consulting                        http://nakedape.cc 
> * * * * * Portland's Premier Open Source Consultancy * * * * *
>