[Zope] SMTP Authenticating MailHost

[Marc Lindahl]

on 12/2/02 8:29 AM, Russell Hires at rhires@earthlink.net scrivened:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hmmm...going through smtplib (which is imported by the MailHost module), I
> see that sendmail is being used to actually send the mail?

not the program sendmail, the function in smtplib.

>Maybe I'm not 
> reading that right. I also saw on the download page for this replacement that
> security could be a problem...I'm looking at this to figure out a way to
> propose a security fix, to allow for the security hashes that smtp has
> available to it to go along with ESMTP...Anybody can help? I'm not a python
> programmer, but I'm attempting to learn! :-)

the security problem isn't with smtplib, it's with the cleartext password in
the ZMI form for mailhost.


> 
> Russell
> On Monday 02 December 2002 04:39 am, Etienne Labuschagne wrote:
>> Hi Marc,
>> 
>> Thanks for the reply.  I have found your product in the meantime and am
>> already using it.
>> 
>> Regards
>> Etienne
>> 
>> At 03:32 PM 11/30/2002 -0500, Marc Lindahl wrote:
>>> Yes, I did it already http://www.zope.org/Members/bowerymarc
>>> 
>>> on 11/26/02 6:50 AM, Tino Wildenhain at tino@wildenhain.de scrivened:
>>>> Hi Etienne,
>>>> 
>>>> --On Dienstag, 26. November 2002 13:24 +0200 Etienne Labuschagne
>>>> 
>>>> <elabuschagne@gmsonline.co.za> wrote:
>>>>> Hi there,
>>>>> 
>>>>> Is anyone working on an Authenticating MailHost that will allow SMTP
>>>>> authentication (new smtplib that comes with Python 2.2 provides this
>>>>> functionality)?
>>>>> 
>>>>> Etienne
>>>> 
>>>> Yes, I am. But I dont know if there are any more available yet.
>>>> 
>>>> Regards
>>>> Tino
>>>> 
>>>> _______________________________________________
>>>> Zope maillist  -  Zope@zope.org
>>>> http://lists.zope.org/mailman/listinfo/zope
>>>> **   No cross posts or HTML encoding!  **
>>>> (Related lists -
>>>> http://lists.zope.org/mailman/listinfo/zope-announce
>>>> http://lists.zope.org/mailman/listinfo/zope-dev )
>>> 
>>> _______________________________________________
>>> Zope maillist  -  Zope@zope.org
>>> http://lists.zope.org/mailman/listinfo/zope
>>> **   No cross posts or HTML encoding!  **
>>> (Related lists -
>>>  http://lists.zope.org/mailman/listinfo/zope-announce
>>>  http://lists.zope.org/mailman/listinfo/zope-dev )
>> 
>> _______________________________________________
>> Zope maillist  -  Zope@zope.org
>> http://lists.zope.org/mailman/listinfo/zope
>> **   No cross posts or HTML encoding!  **
>> (Related lists -
>>  http://lists.zope.org/mailman/listinfo/zope-announce
>>  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> - -- 
> Linux -- the OS for the Renaissance Man
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE962A6AqKGrvVshJQRAsp9AJ9CeauIKnIIN2poDdjED5HnM0YrhgCgtF+b
> HV9s47B75aKr4tvcSLUXdwA=
> =DBq4
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )
>