Security with TLS

Tornoci Laszlo torlasz at xenia.sote.hu
Thu Jan 28 05:44:16 EST 2010


On 01/28/2010 11:28 AM, Nybbles2Byte wrote:
> Hello,
>
> Two quick questions:
>
> Is there a setting in the Cyrus server to force the use of security like
> STARTTLS in the email clients?
>
> It didn't work when I specified "SSL/TLS" in Thuderbird it does work
> with STARTTLS. My understanding is that SSL/TLS would be better because
> you start off secured right from the start instead of starting in clear
> text and then negotiating a secured connection. If this is not correct,
> please enlighten me, if it is correct, is there a way to make cyrus
> accommodate "SSL/TLS"?
>
> Thanks heaps!
> Reg

I simply don't provide plain IMAP on the public interface of the server. 
In the SERVICE section of /etc/cyrus.conf comment out the imap line, and 
have:

imaps     cmd="imapd -s" listen="[xxx.yyy.zzz.www]:imaps" prefork=1

						Yours: Laszlo


More information about the Info-cyrus mailing list