Telnet is insecure but ...

Q*Bert · 03-29-2003, 06:06 AM

If you use a mailbox checker like Inbox Monitor,you're exposing youself equally. It still send your username and password in clear text! Every 10 minutes! (or whatever you've configured it for).

Is there a secure version of the Inbox Monitor anywhere? i.e. using the ssh channel for encypting the password?

Crashed_Again · 03-29-2003, 11:46 AM

I'm not too familiar with Inbox Monitor but a lot of mail clients have an SSL option if the mail server allows it.

Q*Bert · 03-29-2003, 01:21 PM

Yeah, I'm aware of plenty of MTAs that have the SSL functionality.

Isn't this another case of a glaring security flaw stemming from an olde world PDP-11 longhaired "why would anyone want to break in anyway?" mentality.

My mind boggles. Design a secure alternative to telnet and then allow a mail monitor to circumvent it. Gah!

Q*Bert