Re: Looking for Unix-based POP3 server implementing APOP

Mark Crispin <MRC@cac.washington.edu> Sun, 25 September 1994 22:06 UTC

Received: from ietf.nri.reston.va.us by IETF.CNRI.Reston.VA.US id aa03329; 25 Sep 94 18:06 EDT
Received: from CNRI.Reston.VA.US by IETF.CNRI.Reston.VA.US id aa03325; 25 Sep 94 18:06 EDT
Received: from PO2.ANDREW.CMU.EDU by CNRI.Reston.VA.US id aa16441; 25 Sep 94 18:06 EDT
Received: (from postman@localhost) by po2.andrew.cmu.edu (8.6.9/8.6.9) id SAA13741; Sun, 25 Sep 1994 18:01:48 -0400
Received: via switchmail for ietf-pop3+@andrew.cmu.edu; Sun, 25 Sep 1994 18:01:47 -0400 (EDT)
Received: from po5.andrew.cmu.edu via qmail ID </afs/andrew.cmu.edu/service/mailqs/q003/QF.AiVT=ai00UddQwC051>; Sun, 25 Sep 1994 18:00:06 -0400 (EDT)
Received: from Tomobiki-Cho.CAC.Washington.EDU (tomobiki-cho.cac.washington.edu [128.95.135.58]) by po5.andrew.cmu.edu (8.6.9/8.6.9) with SMTP id SAA15411 for <ietf-pop3@andrew.cmu.edu>; Sun, 25 Sep 1994 18:00:01 -0400
Received: from localhost by Tomobiki-Cho.CAC.Washington.EDU (NX5.67e/UW-NDC Revision: 2.27.MRC ) id AA20303; Sun, 25 Sep 94 14:59:13 -0700
Date: Sun, 25 Sep 1994 14:51:10 -0700
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: Mark Crispin <MRC@cac.washington.edu>
X-Orig-Sender: Mark Crispin <mrc@tomobiki-cho.cac.washington.edu>
Subject: Re: Looking for Unix-based POP3 server implementing APOP
To: Glenn Anderson <glenn.anderson@library.otago.ac.nz>
Cc: Skip Montanaro <skip@automatrix.com>, ietf-pop3@andrew.cmu.edu
In-Reply-To: <aaab8e6e0a0150057310@[139.80.200.59]>
Message-Id: <MailManager.780529870.20296.mrc@Tomobiki-Cho.CAC.Washington.EDU>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; CHARSET="US-ASCII"

On Mon, 26 Sep 1994 08:34:05 +1200, Glenn Anderson wrote:
> Unfortunately it is technically impossible to implement APOP on unix
> because unix uses a one way encryption method for passwords. This means
> that the POP3 server can not get a clear text version of the password which
> is required for the APOP algorithm.

This is not quite accurate.

It is not technically impossible to implement APOP on Unix, unless there is a
requirement to use a UNIX login user's password from /etc/passwd.  It is not
necessarily the case that POP authentication credentials have to match UNIX
login user authentication credentials (although that *is* what many POP and
IMAP implementations use).