From: Gene H. <ghe...@sh...> - 2018-12-12 15:58:21
|
On Wednesday 12 December 2018 08:07:23 Bjoern Voigt wrote: > Gene Heskett wrote: > > While I realize there is a need for encrypted passwd's in the more > > densly populated and/or industrial areas where business critical > > information might be sought by the shadier types, that need has not > > reached out here in the puckerbrush. Yet... I am not aware of any > > pop3 server in this moderately rural area, ever asking us to use > > encrypted passwds. Not saying there aren't such isp's but I've not > > encountered any yet. What I'm saying is that forcing it on us, > > would force us to find another fetchmail like agent. In fact, > > they've not even forced us to longer passwds yet. I'd druther they > > did, to at least 20 alpha/numeric chars but too many winders users > > think 12345 or 54321Boom is good enough. And they are the majority > > by far. I'm an island of all linux stuff here. > > Gene, I do not think, that Fetchmail will force us to store passwords > encrypted. But I think, Fetchmail should ofter at least one working > interface to an encrypted password store or password manager. And I > think, the Fetchmail documentation should recommend to store passwords > encrypted. > That I cannot argue with. Optional is best, and the user should be able to make it so from the instructions in the man page. Complete enough he/she won't have to pester the list to do it. And it wouldn't hurt to arrange a cleartext version hidden someplace preferably NOT on the machines drives. Here, a post-it note on the wall would be fine if you could find one that would stick till the rapture. Seems like the glue is getting weaker over the last couple decades... > Greetings, > Björn -- Cheers, Gene Heskett -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Genes Web page <http://geneslinuxbox.net:6309/gene> |