Re: I'm stumped, how on earth do I get gnus to use ssl and not cleartext passwords?

[Jens Thiele]

Andreas Davour <anteRUN@updateLIKE.uu.HELLse> writes:

> [...]
> But when I look at the *Messages* buffer I see this:
>
> Reading active file via nnfolder...
> nnfolder: Reading incoming mail from imap...
> imap: Connecting to <myserver>...
> imap: Opening SSL connection with `openssl s_client -quiet -ssl3
> -connect %s:%p'...done

This more or less means openssl is used to tunnel imap.

> Waiting for response from <myserver>...done
> imap: Authenticating to `<myserver>' using `login'...
> imap: Plaintext authentication...
> imap: Authenticating to `<myserver>' using `login'...done
> nnfolder: Reading incoming mail (no new mail)...done
>
> Plaintext is *not* what I want! I did check the manual about this
> 'login' authentication thing, and got very confused. It sure looks
> like that means cleartext authentication unless told otherwise. How do
> I tell it otherwise?! Do I have to use nnimap for this to work? Since
> an openssl connection is made, is this just a nonsense warning that
> I'm sending a cleartext password along my ssl connection, i.e. not
> sending the password in cleartext at all?

You, probably don't send a cleartext password along your ssl connection
but within. To convince yourself you can use some packet sniffer like
tcpdump or wireshark.

> I need someone to tell me how email over ssl is supposed to work. 

You probably have it working.

Greetings,
Jens