Guillermo Gómez wrote, at 12/04/2007 04:55 PM: > My first question is regarding digest-md5 authentication and tls, can > it be done without the tls layer? Yes. You can do this to offer some means of encrypting authentication without requiring TLS. It (typically) does not encrypt the rest of the message, though, which will be downloaded in the clear. If you do this, make sure you do not also offer PLAIN or LOGIN authentication without TLS. ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
