M Z R wrote:
There it goes, POP-before-SMTP (PBS) defeated. Those who are
still sticking to PBS, guess it's about time they switch to
SMTP AUTH.
SMTP after POP with enforced submission rights is not really
worse than AUTH PLAIN without TLS or AUTH LOGIN. For unknown
reasons folks often confuse SMTP AUTH with enforced submission
rights. An MSA allowing any MAiL FROM for authenticated users
is much worse that SMTP after POP enforcing submission rights.
APOP is arguably "better" than an AUTH PLAIN without TLS - in
theory the latter isn't allowed, but...
almost nobody uses TLS/SSL to encrypt SMTP traffic.
...exactly. Bye, Frank
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg