Full Disclosure mailing list archives

Re: Wireless ISPs


From: Valdis.Kletnieks () vt edu
Date: Tue, 11 May 2004 21:06:30 -0400

On Tue, 11 May 2004 18:08:24 EDT, Jeff Workman <jworkman () pimpworks org>  said:

I make pop3s and imaps available for email users as well as the unencrypted 
versions.  When I tell somebody how to setup their account I tell them that 
they should use the SSL version, and since 99% of them are using Outlook 
Express there's no reason they shouldn't, right?  My mail logs show maybe 3 
people, excluding myself, that use imaps/pop3s, and I am the only user that 
uses STARTTLS with SMTP.

We just said "We're making it available for use on <date>, and we're turning
off the non-encrypted version on <date+6 months>".  Users will get motivated
once they realize that failure to be motivated means that they *will* get
inconvenienced a lot more than the inconvenience of reconfiguring their
client...

This of course isn't an option unless your user community is a captive audience
(university, corporate, etc - you ISPs will need a different way to fix it)....

Attachment: _bin
Description:


Current thread: