SquirrelMail, a Web-Based Mail Server
Subject:   Password sent as...?
Date:   2002-10-24 17:28:45
From:   pmccann
Sounds like an interesting package, but there didn't seem to be any mention in the article of how the username/password combination is passed to squirrelmail: ie, is it encrypted, and if so, how? SSL?


Full Threads Newest First

Showing messages 1 through 2 of 2.

  • You did good
    2008-03-20 13:03:05  be80be [View]

    Squirrel mail is very good webmail app. I use it every day to read logs from my servers and reply to mail from my website you can't have every thing for every one. You have to write a book not a how to password are sent as plain text if you don't use SSL if you use SLL it's High-grade encryption (aes-256 256bit) but your webserver has to use ssl
    and you have to make your own ca.key and ca.crt or pay to have them made for you I just make my own with opessl. and on debian etch it's easy to set up squirrelmail i'm using postix and dovecot-mysql
    squirrelmail works grate
    • https and ssl
      2008-03-20 17:47:54  be80be [View]

      If you like to see a working example of how to setup https and oponssl you can find it here