IMAP and Security issues

[Donnie Barnes]

First, can IMP speak imap-ssl?  I'm not sure it should need to...

I have users who want to use other IMAP mail clients on the 'net other than 
IMP, but I'm wary of setting up a public IMAP server (right now my IMAP server 
is only available to localhost, which works fine for IMP).  I was thinking that
at least an imap-ssl server would be a better option, so I thought I'd see what
folks here were doing.

I'm in the unfortunate situation that I can't necessarily trust the integrity 
of the network that my server sits on and thus do care about sniffing.  That's 
the attraction to the imap-ssl option.  I assume, however, that I could 
probably keep a non-ssl IMAP server for localhost use and have a public 
imap-ssl server, correct?  I'm just worried that would cause consistency 
problems.  *sigh*

Has anyone compared IMP to Intrastore's stuff?  http://intrastore.cdc.com/www/
I played with the demo on their site.  It's not as pretty, but it does have 
more features (at least more than the 2.2 IMP stuff).  It *appears* to have 
its own imap-ssl server, too.  It isn't open source, but it is free for Linux 
use up to 250 users.  That makes it at least another interesting thing to 
compare to, if nothing else.


--Donnie

--
  Donnie Barnes  http://www.donniebarnes.com  djb@donniebarnes.com  879.  V.