Re: authentication, outgoing, IMAP

Kazuhiro Ito <[email protected]> Sun, 17 Dec 2017 20:27:14 +0900
Newsgroups gmane.mail.wanderlust.general
Message-ID <868te1bnn1.wl--xmue__1690.19978861815$1513510023$gmane$org@d1.dion.ne.jp>
> > Why you need to change?
> Security?

LOGIN authentication is meaningless to security.

> When using webmail, I had/have the impression the password is also
> encrypted. I thought this was standard these days. It seems risky to
> send anything confidential like a password in clear text.

Setting elmo-imap4-default-stream-type to ssl means you use IMAP over
SSL.  As I wote in the previous post, ALL communications with server
are encrypted including password (regardless authentication
mechamnism).  I think you don't need any further customization.

> > As authentication mechanism, CLEAR authentication sends plain password
> > to a server.
> So... any ideas how I can debug it? It uses openssl?

I guess server simply dose not support LOGIN authentication.  You can
confirm log by setting elmo-imap4-debug to t, but I think that you
don't need to do it.

-- 
Kazuhiro Ito