MBOX-Line: From lyndon at orthanc.ca  Wed Nov  2 21:16:02 2005
To: imap-protocol@u.washington.edu
From: Lyndon Nerenberg <lyndon@orthanc.ca>
Date: Fri Jun  8 12:34:36 2018
Subject: [Imap-protocol] username/password
In-Reply-To: <43699BFF.6090100@fastmail.co.uk>
References: <436988D9.8040106@fastmail.co.uk>
	<Pine.OSX.4.64.0511022009390.533@pangtzu.panda.com>
	<43699192.2040701@fastmail.co.uk>
	<Pine.OSX.4.64.0511022029540.533@pangtzu.panda.com>
	<43699BFF.6090100@fastmail.co.uk>
Message-ID: <31F31EAE-32E4-44B2-8BAF-17A9EFC8B5E1@orthanc.ca>


On Nov 2, 2005, at 9:11 PM, Max Waterman wrote:

> It seems that the only solution is to have a completely separate  
> server which only allows authentication after SSL/TLS has been set up.

If security is that critical to you then I don't think you have much  
choice other than to a) bring the service in house where you can  
control it, or b) find an outsourced provider who can meet your  
policy requirements.

Given the number of providers who insist on 'security by Microsoft',  
I think a) is your only realistic solution.

--lyndon

