Re: PPP password.

Shawn Bayern (shawn.bayern@yale.edu)
Tue, 9 Feb 1999 15:48:35 -0500 (EST)

Sorry for more mail, but I just wanted to add some thoughts:

> have to specify the right one, which will be <NetID>.mail.yale.edu. KPOP
> runs on 1110.

I meant "port 1110" here, of course.

(Hehe... When I did a web search for "KPOP and 1110" to see how standard
that port assignment was, I found some California radio station named
'KPOP'. It's not, unfortunately, on 1110 AM.)

> If you mean the syntax for the protocol, can't say I do. :) It looks much
> like POP, if I remember correctly, except that you send a bunch of
> Kerberos garbage to authenticate and then, when prompted for your
> password, say something like
>
> PASSWORD MEANINGLESS
>
> but that really, really doesn't matter... ;)

And it *still* doesn't matter, except to point out an interesting fact
about KPOP, which is that it encrypts *only* the password. The rest of
the traffic, including the email you download, goes in the clear. That's
why it's inferior (from a security standpoint) to ktelnet or IMAP-over-
SSL.

Shawn