note 39227 deleted from function.imap-open by sniper
| From: | sniper@php.net | Date: | Fri, 23 Jan 2004 07:32:22 +0000 |
| Subject: | note 39227 deleted from function.imap-open by sniper | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-64056@lists.php.net to get a copy of this message | ||
Note Submitter: Soenke J. Peters
----
imap_open() violates RFC2595 (see 6. PLAIN SASL mechanism), which demands "The PLAIN SASL
mechanism MUST NOT be advertised or used unless a strong encryption layer".
This breaks non-TLS logins using imap_open() with any well-behaving IMAPd.
Nevertheless, you can find a quick hack for Cyrus-IMAPd at http://mirror.mcs.anl.gov/suse-people/choeger/
in ./SLOX/cyrus-imapd-2.1.16-SLES8/source/allow_auth_plain_proxying.patch (sorry for this braindead
linking, but the entire URL wpouldn't come through the line-break check here) to make it work
seamlessly with PHP.