Re: [9fans] plain passwords and keyfs

[Charles Forsyth <forsyth@terzarima.net>]

[-- Attachment #1: Type: text/plain, Size: 626 bytes --]

it's for the pop3 server side for non-plan9 clients
to collect mail by pop3 from a plan 9 mail service
using md5 authentication (hash a challenge using a secret),
for instance.  the protocol requires the server to know
the secret, not just a hash of it.

as it happens, factotum is in the pop3 server loop
on the server, but it doesn't access the secret directly.
that's left to authsrv, because it has access to keyfs.
either way, something on a server must store the real
secret; this way, it's only stored on an auth server,
which is potentially better protected and might only do auth serving
(for instance).

[-- Attachment #2: Type: message/rfc822, Size: 2273 bytes --]

From: "Steve Simon" <steve@quintile.net>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] plain passwords and keyfs
Date: Sat, 24 Jul 2004 14:48:31 +0100
Message-ID: <25eaf31495573cf9d46858cf0222fc62@quintile.net>

Surely the pop3 password in keyfs is now historic
(and could be deleted) given that we now have factotum?

-Steve