Subject: Re: TLS Requirement in SMTP RFC4954 and SASL

From: Tony Finch <[email-masked]>
Date: Mon, 2 Mar 2009 18:18:07 +0000

On Fri, 27 Feb 2009, Paul Romero wrote:
>
> CRAM-MD5 only specifies that  passwords/secrets are to be used
> as plaintext and not how they are stored.

Most non-plaintext stored passwords can't be decrypted for use in
plaintext form. (Again, see unix passwords.)

Tony.
-- 
f.anthony.n.finch  <[email-masked]>  http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.