spf-discuss
[Top] [All Lists]

[spf-discuss] Re: Can this really be true?

2005-09-23 04:46:34
johnp wrote:

I suspect, in this context, you mean SSL not SASL.
 
No - I don't use SSL.

JFTR - SSL is the predecessor of TLS, and STARTTLS is what you
need before AUTH PLAIN (= SASL PLAIN).  Here is what I see with
one MSA:

20050923 13:34:04 TCP connection with mx.#######.de:587
34:04.54 220 mx5.#######.de ESMTP Exim 4.53 Fri, 23 Sep 2005 13:34:04
+0200
34:04.54 ehlo xyzzy.dnsalias.org
34:04.70 250-mx5.#######.de Hello [...]
34:04.70 250-[...]
34:04.70 250-AUTH LOGIN PLAIN CRAM-MD5
34:04.70 250-STARTTLS
34:04.70 250 HELP
34:04.70 auth CRAM-MD5
34:04.83 334 [...]
34:04.86 [...]
34:05.04 235 Authentication succeeded

If I try "auth PLAIN" I get an error, that's illegal without
TLS (STARTTLS).  IIRC "auth LOGIN" worked, but "LOGIN" is no
SASL-mechanism, it's also not specified in an RfC.  Bye, Frank


-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com