secure SMTP and cygnus-sasl handling

[Chuck Swiger]

admin wrote:
>> Sendmail will do STARTTLS if both sides support it, and you can even 
>> configure things to not permit plain text authentication (AUTH LOGIN)
>> unless TLS/SSL has been negotiated.
>
> is there a way to do something similar with POP so it does not handle non-SSL
> negotiated sessions?

I'm not sure about POP, but yes for IMAP; see /usr/ports/mail/imap-uw, which 
does include a POP3 server as well.

[ ...and in another email... ]
 >> Sendmail will do STARTTLS if both sides support it, and you can even
 >> configure things to not permit plain text authentication (AUTH LOGIN)
 >> unless TLS/SSL has been negotiated.
 >
 > this is the answer.  can you point me to someplace on how to do this?

http://www.sendmail.org/~ca/email/auth.html
http://www.sendmail.org/~ca/email/starttls.html

-Chuck