You are viewing a plain text version of this content. The canonical link for it is here.

Posted to server-user@james.apache.org by Cesar Bonadio <bo...@picture.com.br> on 2004/02/12 14:14:09 UTC

TLS in smtp

Hello

I have two questions about smtp and security. 

We force all our users to use smtp auth to send email I know that the 
login and plain methods are not very secure so what is the most secure
method of SMTP AUTH in james?

Is the use of TLS the best way to secure the authentication? 

I see in config.xml that smtp has an TLS option but in the documentation
it has no information, I looked at the code and there is no STARTTLS. Is
anybody
working on develop that? 

Thanks

I think it is more than two questions :)

RE: TLS in smtp

Posted by Cesar Bonadio <bo...@picture.com.br>.

Thanks 

I will check that

On Thu, 2004-02-12 at 11:35, Vincenzo Gianferrari Pini wrote:

> Cesar,
> 
> I use SMTP AUTH + TLS, and it's fine.
> 
> I wrote time ago a wiki page about it that may help you:
> 
> http://nagoya.apache.org/wiki/apachewiki.cgi?James/UsingSSL
> 
> Vincenzo
> 
> > -----Original Message-----
> > From: Cesar Bonadio [mailto:bonadio@picture.com.br]
> > Sent: giovedì 12 febbraio 2004 14.14
> > To: server-user@james.apache.org
> > Subject: TLS in smtp
> > 
> > 
> > Hello
> > 
> > I have two questions about smtp and security. 
> > 
> > We force all our users to use smtp auth to send email I know that the 
> > login and plain methods are not very secure so what is the most secure
> > method of SMTP AUTH in james?
> > 
> > Is the use of TLS the best way to secure the authentication? 
> > 
> > I see in config.xml that smtp has an TLS option but in the documentation
> > it has no information, I looked at the code and there is no STARTTLS. Is
> > anybody
> > working on develop that? 
> > 
> > Thanks
> > 
> > I think it is more than two questions :)
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>

RE: TLS in smtp

Posted by "Noel J. Bergman" <no...@devtech.com>.

> I wrote time ago a wiki page about it that may help you:
> http://nagoya.apache.org/wiki/apachewiki.cgi?James/UsingSSL

We should be pointing people to the current James Wiki:

  http://wiki.apache.org/james/James/UsingSSL

I'm trying to see from infrastructure what needs to be done to move the
pages up a level.

	--- Noel


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org

RE: TLS in smtp

Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.

Cesar,

I use SMTP AUTH + TLS, and it's fine.

I wrote time ago a wiki page about it that may help you:

http://nagoya.apache.org/wiki/apachewiki.cgi?James/UsingSSL

Vincenzo

> -----Original Message-----
> From: Cesar Bonadio [mailto:bonadio@picture.com.br]
> Sent: giovedì 12 febbraio 2004 14.14
> To: server-user@james.apache.org
> Subject: TLS in smtp
> 
> 
> Hello
> 
> I have two questions about smtp and security. 
> 
> We force all our users to use smtp auth to send email I know that the 
> login and plain methods are not very secure so what is the most secure
> method of SMTP AUTH in james?
> 
> Is the use of TLS the best way to secure the authentication? 
> 
> I see in config.xml that smtp has an TLS option but in the documentation
> it has no information, I looked at the code and there is no STARTTLS. Is
> anybody
> working on develop that? 
> 
> Thanks
> 
> I think it is more than two questions :)
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org