Re: Fwd: "POP3 SASL Authentication Mechanism" submitted for publication

[Frank Ellermann <nobody@xxxxxxxxxxxxxxxxx>]

Hector Santos wrote:
 
> AUTH
> +OK list of supported mechanisms follows
> CRAM-MD4
> DIGEST-MD5
> LOGIN
> PLAIN
> .

Hmph, I'd say you'd get the list of SASL mechanisms (+ STLS and 
USER where available) with CAPA, not with a bare AUTH, and it's
CRAM-MD5, not CRAM-MD4.

POP3 and SASL have no "LOGIN" mechanism, if that's USER + PASS the
capability is USER.  At least it's clear that publishing a 1734bis
is a good idea... ;-)   Minus the mandatory DIGEST-MD5 of course.

> Now, have I ever come across a client using DIGEST-MD5?  No, not
> that I recall.

Thanks for info.  The statement "to the best of my knowledge, the 
majority of POP3 implementations support this extension already"
was apparently not about DIGEST-MD5, but more generally about SASL.

Frank