CRAM-MD5 support in Outlook Express?

[Tim Wilde]

On Tue, 13 Apr 2004, John Fox wrote:

> So I'm writing with two hopes:
>
> 1) That someone will confirm or disconfirm the prior assertion that
> OE does not support CRAM-MD5.
>
> 2) That if such support is lacking, perhaps someone else can give
> me a different idea for getting rid of plaintext authentication
> for POP3.

Have you considered offering POP3 via SSL only?  Outlook Express, and
pretty much everything else, support that just fine, and you can still use
the "plaintext" authentication methods, but simply have them protected by
your SSL session.  Alternately, if your POP3 server supports it, you could
offer CRAM-MD5 only via non-SSL, and all authentication methods via SSL,
to cope with clients that support CRAM-MD5 but not SSL.

Tim Wilde

-- 
Tim Wilde
twilde at dyndns.org
Systems Administrator
Dynamic Network Services, Inc.
http://www.dyndns.org/