Subj : Pssword ord ord case ins
To   : mark lewis
From : Alan Ianson
Date : Sun Apr 26 2020 12:26 pm

Hello mark,

AI>> I was talking about binkps over TLS. In that case we wouldn't
AI>> need a session password either since we are relying on the TLS
AI>> handshake.

ml> are two condoms better than one?

In the case of TLS we get a secure session but that could be anyone so we still
need a session password or some mechanism to authenticate so mail from non
password protected sessions is placed in the non secure inbound.

I was wrong when I said the above.

ml> with the speed of today's systems, the additional processing and/or
ml> the decision to use or not the session password is negligible... the
ml> additional space required is equally negligible, as well...

That is true but a proper binkps protocol (if there ever is one) would best be
designed simply to do what we need it to do in an efficient way.

Ttyl :-),
        Al

--- GoldED+/LNX
* Origin: The Rusty MailBox - Penticton, BC Canada (1:153/757)