Re: [Phpgroupware-users] smtp auth in email app?

[Chris Weiss]

Dirk H. Schulz (address@hidden) wrote*:
>There is two things I would like to resist on: first is that relying on IP is 
>quite
>insecure. That can be spoofed, that is why I would like to have smtp auth.

rare occuence, easily defeated with a proper firewall :)  Still a valid feature
request, though not as big a security risk as you would think.

>The other thing is that anglemail seems to try tls when auth-ing for imap 
>(there
are
>maillog-entries looking like that). That means at least it can use STARTTLS, 
>right?
>
>But then, why should tls be implemented and smtp auth not?

tls = IMAPS or IMAP over SSL.  Because IMAP transmits a clear text password.
regular smtp has no passwords.

>So I would like to know - if possible - who the maintainer of the email app is 
>and
>if I can ask him/her for that.

there is a mailing list at http://anglemail.org/  If accepted, this would be a 
new
feature for Anglemail which would eventualy make it to phpgw cvs, but wouldn't 
be
put in stable.  Anglemail works quite well in .14.001 though.