Re: outlook user/password in clear

From: gmsecguy (gmsecguy_at_mail.com)
Date: 03/19/05


Date: Sat, 19 Mar 2005 08:25:44 -0800

Thanks.
 I figured as much. SBC global support saying that it is my client. I wanted
to make sure I had some others opinions .
"Karl Levinson, mvp" <levinson_k@despammed.com> wrote in message
news:udJu46JLFHA.2716@TK2MSFTNGP15.phx.gbl...
>
> "gmsecguy" <gmsecguy@mail.com> wrote in message
> news:eMUkDvJLFHA.3908@TK2MSFTNGP10.phx.gbl...
> > I notice that when I use my outlook 2000 sp1 with XP I can see the user
> name
> > and password in the clear as it goes to the SBC sever they say it is a
M/S
> > problem or I have a password cracker allowing it to go out that way.
Well
> I
> > know I have no cracker sw. fresh install. Is this the way outlook
normally
> > sends out user/password or maybe Iam missing a setting.
>
> It's not a MS flaw, your email client is using whatever standard
> non-Microsoft protocol that is enabled on your mail server. MS provides
> ways to encrypt this, but it's up to your mail server admin to make it
> possible for you to use these. Most people and servers use unencrypted
POP3
> and SMTP and/or IMAP for authentication and communication, especially for
> Internet email. I'm not sure who is saying this is a MS problem or why
they
> are saying it, but they are dead wrong. Get them to provide specifics on
> why it is a MS problem and what encrypted protocols they have enabled on
> their mail server. They would need to provide instructions as to how to
> enable whatever kind of encryption they have decided to use, not MS.
>
>
>



Relevant Pages

  • Re: Alarming LACK of security in OS X
    ... So you are saying that the security in OS X is dependant on the user doing the correct thing? ... On the mail server information you pointed me to earlier, it would be easy enough just to add the .app extension to the list of files not to send, etc. ... Seeing that there are still enough people out there that randomly click on crap, I believe that more drastic measures need to be in place to protect the computing community at large. ... Microsoft has made claims that driver signing has reduced their costs by increasing driver reliability. ...
    (comp.sys.mac.advocacy)
  • Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hackers, extradition to US
    ... So basically what you're saying is that we should all shut up and not ... and that trolls should be trolls and stay ... FIN (when server to client) = Time for you to leave. ...
    (Full-Disclosure)
  • Re: find process by processname
    ... I'm not aware of another way to determine a process (that's not saying there ... you may be able to use a config file, however, then you are still having to ... Smart Client DevCenter - http://msdn.microsoft.com/smartclient/ ...
    (microsoft.public.dotnet.framework.windowsforms)
  • Re: OpenQM vs. Everything Else
    ... compatible with what the client wants to do, ... saying is that as far as the desktop is concerned, ... solutions that are compatible with Microsoft. ... Taking an anti-MS ...
    (comp.databases.pick)
  • Re: Speeding up wokr flow
    ... I'm in the design stage. ... things when you're starting a project and the client keeps saying "and oh, ... > better of junking Access and using Excel instead, ...
    (microsoft.public.access.tablesdbdesign)