Re: [Imap-protocol] STARTTLS after PREAUTH
Lyndon Nerenberg <[email protected]>
| Newsgroups | gmane.mail.imap.general |
|---|---|
| Message-ID | <[email protected]> |
On Mar 18, 2014, at 5:04 PM, Bron Gondwana <[email protected]> wrote: > I can't understand how STARTTLS ever got floated as an idea. It's totally insane. Damn you and your 20/20 hindsight! Care to lend us your waybac machine? :-) Anyway, if you think STARTTLS is horrific, you really don't want to know about the adventures surrounding the early implementations of AUTH ... The bottom line is that breaking every existing IMAP client and server wasn't a practical way to move forward. And the various authentication bits in IMAP rolled out just at the end of the 'naive' age of the 'we are all friends' internet. They were (are) incremental improvements to the situation as it existed. Breaking existing clients/servers was not an option. The best you can hope for is to offer better alternatives, encourage adoption, and hope attrition eventually solves the problem. Which it never will, but almost two decades after the fact, anyone using, or inflicting upon someone, an IMAP client that blindly issues LOGIN is perhaps deserving of their fate. C'est la vie. --lyndon _______________________________________________ Imap-protocol mailing list [email protected] http://mailman13.u.washington.edu/mailman/listinfo/imap-protocol
signature.asc
(application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE----- iQIcBAEBAgAGBQJTKPVlAAoJEG8PnXiV/JnUA/QP/0l5y/wqhCXmqw1tT6q5qHjc koE12BucrXFz5vqxD5uMsdA8Qutmg+pcB3aspwB8V27lQLmuz+Cfpq7qdbAKnPds /Kk7lhN6CBobPHcNxfc4s6Na8rzKiJTvGzalk3YSVeZwlBwp//dYcJ+jKdG/lJGJ zMgaRGVgDW4uUIazqcbf/wrQb+ZbBmcfCb1S2U1kENWQp4z5tRM7Z8aEcHB+7bpH P9rrM0e/as6creBRfsO8rVzpNWHlXt9JJIJXQPUrpzb1OF0TZ5Nvxzm3VonV5elL hGhA0OY+PCLhJsFkhOdYunYH+eLejQCWNQ9v80aKo5DrKc+5WV0wJjDf+/vQD9nF GggrIR/G3D/tm4sx0DKFi54sGpHI2Sm1hWSWy/FaOSSZoAl4uPYmhQch04BExeGt 9zxFWyUMiMwyzVj7GYmLEk08mP75K2iBMMOakK6mqQhOx6QhlaemBCg2hQ/W6jbR SvWZv3e0tf03UYuuuKK6fCLYL48+zHLHJdGF1onvFWiqeiPQTeext0JgPerFh1iN jSFwr9ONRnMtK07iT2pCcFtIZKM2yO1hEEixXOGAZc7S6R4GPqpEh5Z3yXrlBM/A ApqPxZEIaGYHqoXuYiFw87C0JvSI+XrhXptBmpsVxkB8IeCzGxsK+tWxEtwT/Diu AqZMLeGwDtnwvuNmOCeS =vBsG -----END PGP SIGNATURE-----