CRAM-MD5 support in Outlook Express?

[John Fox]

Hello,

We're a small ISP (~13,000 email accounts) and I would really like to see
us move away from cleartext passwords for our POP3 service.  I am currently
interested in using CRAM-MD5 authentication, as I already know I will be
installing Courier's POP3 daemon, and I've read that it supports CRAM-MD5.

I mentioned this idea on a different mailing list, and was told that 
Outlook Express (which I *must* support) does not have CRAM-MD5 support.
However, a friend who is knowledgeable in crypto field told me that 
CRAM-MD5 has been around a long time, and that he doubts that OE lacks
support for it.

So I'm writing with two hopes:

1) That someone will confirm or disconfirm the prior assertion that
OE does not support CRAM-MD5.

2) That if such support is lacking, perhaps someone else can give
me a different idea for getting rid of plaintext authentication
for POP3.

With thanks and regards,

John
--
+---------------------------------------------------------------------------+
| John Fox <jjf @ mind.net>    |   System Administrator   | InfoStructure   |
+---------------------------------------------------------------------------+
| I used to trust the media to tell me the truth, tell us the truth         |
| But now I've seen the payoffs everywhere I look                           |
| Who can you trust when everyone's a crook?                                |
|             -- Queensryche, "Revolution Calling"                          |
+---------------------------------------------------------------------------+