Re: Is SMTP with no authentication possible?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thursday, September 20 at 08:16 PM, quoth Chris G:
>> Why doesn't removing the username from the equation work?
>>
>> unset smtp_pass
>> unset smtp_user
>> set smtp_url='smtp://mail3.atroad.com'
>>
> Well it might do but I'd have to type my user name in every time I
> connected which would become a bit of a bore after a while.
Wait, what? Why would it require a user name? I've *never* encountered
an SMTP server that required that I send a username, but didn't need a
password. In fact, I think it would be an RFC violation to advertise
SMTP-AUTH and modify the standard authentication mechanisms to not
accept a password (and accepting just *any* password is equally
strange). I mean, seriously, what's the point of asking for a username
but not a password? It doesn't prevent unauthorized use, it doesn't
provide for a way of auditing messages, it doesn't provide you with
*anything* that can't be obtained by simply not requiring a username
at all.
~Kyle
- --
One of the penalties for refusing to participate in politics is that
you end up being governed by your inferiors.
-- Plato
-----BEGIN PGP SIGNATURE-----
Comment: Thank you for using encryption!
iD8DBQFG8snXBkIOoMqOI14RAoXCAJ9TXVdAyxKF9HwEGClLKwlSyZgWDwCdHdYS
PZqHyyq+cpIXiiAPiHac1FQ=
=ux5X
-----END PGP SIGNATURE-----