OT: Enhanced IMAP protocol

[Rob Banz]

I would argue that it's out of scope -- credential management should  
be taken care of by your credential management system, be it through a  
web interface or whatever. Even if it were to be an accepted spec, the  
chances of all of the client-writers implementing it, and in a  
reasonable way, are slim to none.

I'd bet more on clients providing a reasonable interface to the IMAP  
"motd" -- which, after authentication, would be a great way to let the  
user know that their password needs to be changed.

On Jan 5, 2010, at 11:02 PM, ram wrote:

> Would it be practical to have common protocols like IMAP to support
> enhanced features
>
> For eg.
>
> IMAP protocol may possibly support change password.
> A IMAP server administrator may optionally configure a change-password
> hook  on the server which would change the password on whatever  
> backend
> he uses for eg ldap or a RDBMS or  Active directory
>
> The advantage is that the MUA can support change password and the user
> experience will be a lot better having only a single familiar app to
> deal with.
>
> That will be a lot easier for admins to tell the users to change
> password regularly rather than giving them a new link and asking  
> them to
> change password ( .. and that mail looks more like a phishing mail )
>
>
> Thanks
> Ram
>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html