Title: IMAP/POP AUTHorize Extension for Simple Challenge/Response
Author(s): J. Klensin, R. Catoe, P. Krumviede.
Status: PROPOSED STANDARD
Date: Jan 1997
Length: 10446
Obsoleted by: RFC2195
While IMAP4 supports a number of strong authentication mechanisms as described in RFC1731, it lacks any mechanism that neither passes cleartext, reusable passwords across the network nor requires either a significant security infrastructure or that the mail server update a mail-system-wide user authentication file on each mail access. This specification provides a simple challenge-response authentication protocol that is suitable for use with IMAP4. Since it utilizes Keyed-MD5 digests and does not require that the secret be stored in the clear on the server, it may also constitute an improvement on APOP for POP3 use as specified in RFC1734.
[sh-index] Back to list of manuals
|
| |
