encrypted pop/imap?

encrypted pop/imap?

[Dan Mills]

Hello,

I just don't feel good sending my password in clear text over the
network.  Is there a way to ecrypt this?  At least the authentication
stuff--I don't really care that much about the messages themselves
being sent in clear text.

Perhaps there's a way to tunnel pgnus' connections through ssh?  Has
anyone done this?

-Dan

-- 
Dan Mills, Duke Class of 2000         -o)
email: dm(at)cs(dot)duke(dot)edu      /\\
-----------------------------------\ _\_v
Damn Sill.. Sand Mill?  All Minds! |_____

Re: encrypted pop/imap?

[Lee Willis]

Dan Mills <dm@cs.duke.edu> writes:

> Perhaps there's a way to tunnel pgnus' connections through ssh?  Has
> anyone done this?

Nothing to do with Gnus as such, you may want to take a look at

http://metalab.unc.edu/LDP/HOWTO/mini/Secure-POP+SSH.html 

which deals with how to use ssh's port forwarding facilities to acheive
what you're looking for.

HTH
Lee
-- 
I was doing object-oriented assembly at 1 year old ...  
For some reason my mom insists on calling it "Playing with blocks"

Re: encrypted pop/imap?

[Simon Josefsson]

Dan Mills <dm@cs.duke.edu> writes:

> I just don't feel good sending my password in clear text over the
> network.  Is there a way to ecrypt this?

imap.el support CRAM-MD5, kerberos4 (gssapi/kerberos5 should work too,
haven't really gotten around to test it) and SSL, the next release
should support DIGEST-MD5 and STARTTLS too.

Have a look at the documentation for `nnimap-authenticator' and
`nnimap-stream'.

> Perhaps there's a way to tunnel pgnus' connections through ssh?

Sure, set up the ssh port-forward and tell Gnus to connect to
localhost:4711 (or whatever).

Re: encrypted pop/imap?

[Andi Hechtbauer]

Dan Mills <dm@cs.duke.edu> writes:

> Hello,
> 
> I just don't feel good sending my password in clear text over the
> network.  Is there a way to ecrypt this?  At least the authentication
> stuff--I don't really care that much about the messages themselves
> being sent in clear text.
> 
> Perhaps there's a way to tunnel pgnus' connections through ssh?  Has
> anyone done this?

I use 

ssh -C \
    -L 9143:imap.server.xy:143 \
    /usr/X11R6/bin/xbiff -file /path/to/my/procmail_log

before firing up gnus and just tell gnus to connect to 
localhost port 9143:
(setq gnus-secondary-select-methods
        (nnimap "hip"
                (nnimap-address "127.0.0.1")
                (nnimap-server-port 9143)
                (nnimap-list-pattern ("INBOX" "mail/*")))
        ))


As you guessed (or not :-) "procmail_log" is a nnimap group
that gnus fetches, but that's unsubscribed, so xbiff
works.

It's not a very elegant solution, but it works for me.

bye,
-- 
Andi Hechtbauer                                           anti@spin.de 
System Administration                         voice: +49 941 94 65 937
SPiN GmbH               http://www.spin.de/     fax: +49 941 94 65 938  
------- web design - java chats - guestbooks - java/cgi coding -------

Re: encrypted pop/imap?

[Björn Torkelsson]

Simon Josefsson <jas@pdc.kth.se> writes:

> Dan Mills <dm@cs.duke.edu> writes:
> 
> > I just don't feel good sending my password in clear text over the
> > network.  Is there a way to ecrypt this?
> 
> imap.el support CRAM-MD5, kerberos4 (gssapi/kerberos5 should work too,
> haven't really gotten around to test it) and SSL, the next release
> should support DIGEST-MD5 and STARTTLS too.

Somewahet off topic, but...

Which imap servers exists that supports kerberos, preferably heimdal?

/torkel

Re: encrypted pop/imap?

[Simon Josefsson]

BjXrn Torkelsson <torkel@pip.hpc2n.umu.se> writes:

> Which imap servers exists that supports kerberos, preferably heimdal?

Cyrus IMAPD <URL:http://asg.web.cmu.edu/cyrus/>. I believe there are
heimdal-patches available for UoW imapd too (MIT krb5 already work,
I'm told).