M$ and encryption

[dshin]

i had an expirience last days with M$ Outlook 2003 (yes, the new one),
i created an account with my email information. The server to connect to, uses
CRAMD5 (sorry, if i spell it wrong), but there is no option in Outlook, where you can toggle the authentication methods, there is only an option to use the "secure" one provided by M$ (i forgot thats name). That's why i decided to install a different mailer.

Isn't it horrible ?!

It sounds like: "You should not use password encryption, [bad thing], and if
you use, than the only one we have a backdoor to." ;)

[bascule]

The simplest solution for Outlook is to use POP3/IMAP over SSL. It's what I've been doing here, and it's relatively aproblematic. I'm using self-signed certificates, so I have to install them onto each system people use Outlook from (or else it bitches)

But yes, not supporting CRAM-MD5/CRAM-SHA1 is pretty ridiculous...

The simplest solution overall is to not use Outlook...

[dshin]

The simplest solution overall is to not use Outlook...

yes, you are right. But it is very difficult to convince people to use "the bat!" (e.g), after their brains were MS-washed.