On Sun, Aug 31, 2003 at 02:36:31PM -0400, Chuck Yerkes wrote:
<snip>
8.12 lets you be sure that you're using TLS before it does the SMTP-AUTH (there's no mandate of order - TLS before auth - in the RFCs), so you could use cleartext passwds safely.
Ideally, you'd generate CERTs for the laptop and use that trusted/ known certificate for proof that it's you.
I don't know where setup of that is documented.
Anyone?
I posted a HOWTO a week or so ago. Somebody else was having trouble w/ the instructions. Check the archives. Maybe somebody else can go through it and find the spot 'causing trouble. Though, follow the instructions *before* you do any of the SASL stuff. I've never used SASL, 'cause the TLS authentication was easier to setup and so I don't know how/whether SASL configuration could effect my TLS authentication instructions.
- Bill