Re: [Exim] CRAM-MD5 with no clear password

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Nico Erfurth
Datum:  
To: Silmar A. Marca
CC: exim-users
Betreff: Re: [Exim] CRAM-MD5 with no clear password
Silmar A. Marca wrote:
> I store this in MD5 in field pass_md5...


With CRAM the password is NEVER transmitted over the wire, CRAM means
Challenge-Response-Authentication-Mechanism. The idea is to encrypt some
random string with the password on both sides and compare the encrypted
strings. So you need the PLAINTEXT passwords on both sides.

Nico