Security Basics mailing list archives
RE: POP3 passwords
From: "Keller, Tim" <Tim.Keller () stratus com>
Date: Mon, 20 Oct 2003 15:49:11 -0400
Yeah, but that isn't going to compromise a box. At worst, someone can login and impersonate you and send email from the machine (aka, use it as a spam cannon) or steal any email you've got on the box. However, there are ssl (using PKE) wrapped versions of pop3 that solve this problem. -----Original Message----- From: Damian Lennon [mailto:dlennon () fcc net] Sent: Monday, October 20, 2003 11:30 AM To: 'Zachary Mutrux'; 'Security-Basics' Subject: RE: POP3 passwords It may possibly due to those who have sysadmin responsibilities, use a unique POP3 password, preventing that compromised password from impacting their security on servers. Regards, -Damian -----Original Message----- From: Zachary Mutrux [mailto:zmutrux () compumentor org] Sent: Friday, October 17, 2003 7:40 PM To: Security-Basics Subject: POP3 passwords Why has it not been a bigger problem that POP3 passwords are unencrypted when sent over the public Internet? Seems like they would be pretty easy for a miscreant to steal. zm -- Zac Mutrux Technology Consultant CompuMentor 415-633-9437 --------------------------------------------------------------------------- FREE Whitepaper: Better Management for Network Security Looking for a better way to manage your IP security? Learn how Solsoft can help you: - Ensure robust IP security through policy-based management - Make firewall, VPN, and NAT rules interoperable across heterogeneous networks - Quickly respond to network events from a central console Download our FREE whitepaper at: http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015 ---------------------------------------------------------------------------- --------------------------------------------------------------------------- FREE Whitepaper: Better Management for Network Security Looking for a better way to manage your IP security? Learn how Solsoft can help you: - Ensure robust IP security through policy-based management - Make firewall, VPN, and NAT rules interoperable across heterogeneous networks - Quickly respond to network events from a central console Download our FREE whitepaper at: http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015 ---------------------------------------------------------------------------- --------------------------------------------------------------------------- FREE Whitepaper: Better Management for Network Security Looking for a better way to manage your IP security? Learn how Solsoft can help you: - Ensure robust IP security through policy-based management - Make firewall, VPN, and NAT rules interoperable across heterogeneous networks - Quickly respond to network events from a central console Download our FREE whitepaper at: http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015 ----------------------------------------------------------------------------
Current thread:
- Re: POP3 passwords, (continued)
- Re: POP3 passwords Todd Troxell (Oct 20)
- Re: POP3 passwords JGrimshaw (Oct 20)
- Re: POP3 passwords Hendra Santosa (Oct 21)
- RE: POP3 passwords Dave Killion (Oct 20)
- Re: POP3 passwords Meritt James (Oct 20)
- RE: POP3 passwords Steve McLaughlin (Oct 21)
- Re: POP3 passwords Francisco Andrades (Oct 21)
- Re: POP3 passwords Simon Garner (Oct 21)
- RE: POP3 passwords Golden_Eternity (Oct 22)
- RE: POP3 passwords Chris Merkel (Oct 20)
- RE: POP3 passwords Keller, Tim (Oct 20)
- Re: FW: POP3 passwords Sec1 (Oct 20)
- RE: POP3 passwords Dave Killion (Oct 21)
- Re: POP3 passwords Phillip McCollum (Oct 22)