Plaintext only for loopback?

[Jorey Bump]

Chris Pepper wrote, at 01/13/2008 01:59 AM:

> 	I want to allow plaintext auth only for SquirrelMail (running on the 
> Cyrus IMAPd server), and require encrypted authentication over all 
> physical network connections. 

Why do you want plaintext auth only for SquirrelMail? It supports TLS, 
alternate ports, CRAM-MD5, and DIGEST-MD5. For example, My Squirrelmail 
is set up to use LOGIN/TLS on port 993 (settings inherited from a 
historical setup, I can also support the other options). Are you trying 
to avoid the overhead of TLS?