Secure email protocol support in Dispatcho
I'd like to know whether there is any plan to support some more secure email protocols (for example APOP and IMAP) than POP3 in Dispatcho?
We installed a FogBugZ system on a Linux server but was disappointed to find that it only claims to support POP3. POP3 is known to be a insecure protocol as the account password is transmitted in plain text, so when we tried to request POP3 access on the mail accounts for our FogBugZ system it raised a flag in our security group. We had to install a customized (and privilege restricted - only allow coonections from the Dispatcho process) pop3 daemon (vm-pop3d) to deliver the mails.
The PHP mail API used by Dispatcho seems to provide support for Unix local mailbox and IMAP access in addition to POP3, so if you could add support for local mailbox or IMAP protocol in retrieving emails, it will be a great security enhancement for your next version.
Wednesday, September 15, 2004
We already support secure pop3. Just run a secure server (the default is port 995 for pop3).
Michael H. Pryor
Fog Creek Software
Thursday, September 16, 2004
Fog Creek Home