Please do not top-post. >> I'm wondering if there's a way to encrypt the Squirrelmail sessions. I >> installed the secure_login plugin, so the login is encrypted, but once the >> user is logged in the session is no longer encrypted. > > You have to create a .htaccess file in the squirrelmail directory > > <IfModule mod_rewrite.c> > RewriteEngine On > RewriteCond %{SERVER_PORT} !^443$ > RewriteRule ^(.*)$ https://%{SERVER_NAME}/src/$1 [L,R=303] > </IfModule> You do not HAVE to do so. That plugin has an option to leave the entire session encrypted. Please read the configuration file more carefully. ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users