>>> josh at trutwins.homeip.net 03/25/04 03:57PM >>>
>I just implemented IMAP over SSL using Courier IMAP and my client has two different SSL options for IMAP,
> one is STARTTLS the other is IMAP over SSL (sylpheed is my client)

> I am curious if anyone can sum up what the difference is between these two.  

> As near as I can tell/guess with ethereal, IMAP over SSL is the exact same protocol as IMAP
> just on an SSL enabled port (993 typically) while STARTTLS is SSL encrypted, but on the IMAP
> port (143).  But with STARTTLS is it a different protocol?  Is the SMTP connection encrypted too?

Sounds like a good basic summary. The key difference is that IMAPS is encrypted from the outset.
IMAP with StartTLS allows you to connect first, then initiate encryption.

>From a Courier perspective, with IMAPS, you are forcing anyone who connects to use encryption.
If you use starttls, then you have the option to force encryption or simply allow it at the users discretion.
Its a configuration option in the imap configuration file in your courier/etc directory (wherever that may
be). I'm doing this from memory, since my courier server is at home.

> A google on this doesn't really provide much help.

HTH,
Bruce


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list