Re: SMTP Working Group Proposal at smtpng.org

[John C Klensin <john+ietf at jck.com>]

--On Tuesday, August 20, 2002 3:27 PM -0700 william at elan.net
wrote:

>...
>> The same methods can be used no problem.  There's no reason
>> SMTP AUTH can't be used between ISP's, except for the lack of
>> a PKI, unless you want to manage O(n**2)
>> password/authentication token pairs.
> SMTP AUTH sends passwords in clear text for starters.

Hmm.  I use SMTP AUTH fairly frequently, and have never used it
with a clear-text password.  Perhaps there is some disconnect
here (and in other parts of your note as well).

      john