Cyrus backup: is traffic from master to backup server encrypted?

... or do I need to establish my own SSH tunnel from master to backup 
server?

I've set up my dedicated Cyrus backup server with tls_server_cert and 
tls_server_key, and when I connect to port 2005 I see that STARTTLS is 
offered:

# nc localhost 2005
* SASL PLAIN LOGIN DIGEST-MD5
* STARTTLS
* COMPRESS DEFLATE
* OK rsync Cyrus backup server 3.0.11-Debian-3.0.11-1~bpo10+1
STARTTLS
NO command not implemented

But as shown, the STARTTLS command from the client is rejected.

I believe that DIGEST-MD5 gives me some level of privacy (sync_test 
reports a security strength factor of 128) even without TLS?

-- 
*Deborah Pickett*
System Administrator
*Polyfoam Australia Pty Ltd*

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus