Authentication over SSL

[Russ Allbery]

Julien ÉLIE <julien at trigofacile.com> writes:

> And I have also implemented the following sequence:
>
> LIST
> 480 Authentication required for command
> AUTHINFO USER test
> 483 Encryption required
> STARTTLS
> 382 Begin TLS negotiation now
> AUTHINFO USER test
> 381 Enter password
>
> I hope it is the right one to do.  Note that it happens only if
> require_ssl: is put for all available auth blocks, as we agreed
> (AUTHINFO USER is still possible if there is an available auth block
> without require_ssl:).  The right behaviour is only done in
> CAPABILITIES.

That looks fantastic.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

    Please send questions to the list rather than mailing me directly.
     <http://www.eyrie.org/~eagle/faqs/questions.html> explains why.