Firewall Wizards mailing list archives

Re: IMAP- how to protect a server?


From: "Aaron D. Turner" <aturner () vicinity com>
Date: Tue, 8 Jun 1999 09:31:05 -0700 (PDT)


Ah.  I think that's the bit of info I needed.  Thanks Ge'.   Next
question:  Anyone have a matrix showing the IMAP clients and servers
that support SSL/client certs and actually work with each other?  I'm
sure there's one on the web somewhere...

-- 
Aaron Turner, CNE   aturner () vicinity com  650.237.0311 x252
Network Engineer    Vicinity Corp.        http://www.vicinity.com
Email-to-page: 6505721411.1146752 () pagenet net [Subject & Body sent]

On Mon, 7 Jun 1999, Ge' Weijers wrote:

On Sat, Jun 05, 1999 at 01:10:42AM -0400, Carric Dooley wrote:
I have been watching this thread... and I can't see how SSL protects the
server.  That would protect (to a degree) the content of the e-mail and
users passwords to the server, but not the server itself.  

If you _require_ the use of client certificates only legitimate users
can connect to the IMAP server. This keeps most people from connecting
to you IMAP server altogether. This differs from the common use of SSL
on the web, where only the server has a certificate, and the client is
essentially anonymous.

Ge'

-- 
-
Ge' Weijers                                Voice: (614)326 4600
Progressive Systems, Inc.                    FAX: (614)326 4601
2000 West Henderson Rd. Suite 400, Columbus OH 43220




Current thread: