Free email solutions for PLAIN authentication.

erck2014 · 15 Jan 2014, 03:15 AM

Calling all email gurus. I have a unique professional request. I need help locating a free email solution to replace a problematic service currently handled by Inbox.com. The client I provide support for uses old software with certain limitations, specifically, security (or lack thereof). This software can only handle PLAIN email authentication, not secure (opposite modern trends). So you can imagine my search for alternatives has been difficult, which brings me to this rare lifeline to this forum. So, I need a free (or very low cost) email solution (pop3 or imap) with PLAIN authentication. This client is located in the heart of Shenandoah Valley Virginia. But if I (you) find something, it will help many clients nationwide who are stuck with this old software.

janusz · 15 Jan 2014, 03:59 AM

What are your client's reason for using this old piece of software? Would it be easier/simpler to persuade him to upgrade to something more secure?

Havokmon · 15 Jan 2014, 10:13 PM

Quote:

Originally Posted by erck2014

Calling all email gurus. I have a unique professional request. I need help locating a free email solution to replace a problematic service currently handled by Inbox.com. The client I provide support for uses old software with certain limitations, specifically, security (or lack thereof). This software can only handle PLAIN email authentication, not secure (opposite modern trends). So you can imagine my search for alternatives has been difficult, which brings me to this rare lifeline to this forum. So, I need a free (or very low cost) email solution (pop3 or imap) with PLAIN authentication. This client is located in the heart of Shenandoah Valley Virginia. But if I (you) find something, it will help many clients nationwide who are stuck with this old software.

Your assumption is wrong. PLAIN is actually the best solution. Standard 'encrypted' password authentication schemes require the host to store passwords in clear text. Now there are exceptions - Dovecot allows for a way to store the password encrypted - but that's a proprietary solution - making migrations difficult on the host's side. Hashing passwords (irreversible) is the best way to store passwords.
If the host's database were to be compromised on a service that uses 'encrypted passwords', your account would likely be compromised.

So 'security' and 'modern' depends on your perspective. Would you prefer to send your password encrypted via an encrypted channel (SSL/TLS) so it's secure on the host, or do you want to specifically encrypt your password so it can be transmitted securely over a non-encrypted channel (where the rest of your data would also be in plain text)and risk it not being safe on the host?

Use SSL/TLS to encrypt the entire connection. Then both your authentication and your data will be secure.

Everyone should support PLAIN. (I misunderstood the issue - INBOX doesn't support plain?)

erck2014 · 16 Jan 2014, 04:21 AM

I am pretty sure I did not intend to make an argument whether PLAIN or SECURE is a better solution. So I don't really care how the technologies work or what makes them better.

I will try to explain my dilemma different. The free pop3/smtp service thru Inbox.com started out as a good solution for my "software" because Inbox.com is the one solution that seems to support PLAIN authentication (meaning ports 110 and 25 and 587). Similar solutions thru almost every other alternative seems to have jumped on the secure bandwagon and replaced PLAIN with SSL/TLS. (other ports besides 110 and 25 and 587). Recently, the service uptime thru Inbox.com has become a major concern so now I need another alternative exactly like Inbox.com. I am not a software developer, so I am unable to change the limitations of "my software", otherwise I would and be done with it. I am just a support technician trying to avoid leaving my client up s**t creek.

Havokmon · 17 Jan 2014, 03:00 AM

Quote:

Originally Posted by erck2014

I am pretty sure I did not intend to make an argument whether PLAIN or SECURE is a better solution. So I don't really care how the technologies work or what makes them better.

I will try to explain my dilemma different. The free pop3/smtp service thru Inbox.com started out as a good solution for my "software" because Inbox.com is the one solution that seems to support PLAIN authentication (meaning ports 110 and 25 and 587). Similar solutions thru almost every other alternative seems to have jumped on the secure bandwagon and replaced PLAIN with SSL/TLS. (other ports besides 110 and 25 and 587). Recently, the service uptime thru Inbox.com has become a major concern so now I need another alternative exactly like Inbox.com. I am not a software developer, so I am unable to change the limitations of "my software", otherwise I would and be done with it. I am just a support technician trying to avoid leaving my client up s**t creek.

No problem - and I did read it wrong initially. Just wanted to be sure that wasn't the issue.

Check out stunnel - there are versions for all OSs. You can configure it to open a local port (110), and connect to a remote SSL site (993). Then you configure your client to connect to port 110 locally, to be able to retrieve mail from the remote site that only supports SSL on port 993.

That should increase the number of email services available to you.

erck2014 · 17 Jan 2014, 06:59 AM

Thanks for staying with this thread, much appreciated.

Very interesting approach I shall give this a try.

Just when you think the neat tools are only available to high-paid, high-budget network admins...freeware manages to undermine conventional wisdom. I like it.

In the meantime, if anyone locates a solution like Inbox.com, please share.

erck2014 · 18 Jan 2014, 01:14 AM

Update on this;

I installed stunnel and spent less than an hour learning the config.

First I tested with Live.com. The connection was successful but after a while their server gave a warning about too many connections within 15 minutes. Quotas won't work for me, so scrapped that idea.

Gmail was successful, no quota. So I'm happy.

15 Jan 2014, 03:15 AM	#1
erck2014 Junior Member Join Date: Jan 2014 Posts: 4	Free email solutions for PLAIN authentication. Calling all email gurus. I have a unique professional request. I need help locating a free email solution to replace a problematic service currently handled by Inbox.com. The client I provide support for uses old software with certain limitations, specifically, security (or lack thereof). This software can only handle PLAIN email authentication, not secure (opposite modern trends). So you can imagine my search for alternatives has been difficult, which brings me to this rare lifeline to this forum. So, I need a free (or very low cost) email solution (pop3 or imap) with PLAIN authentication. This client is located in the heart of Shenandoah Valley Virginia. But if I (you) find something, it will help many clients nationwide who are stuck with this old software.

15 Jan 2014, 03:59 AM	#2
janusz Intergalactic Postmaster Join Date: Feb 2006 Location: EU Posts: 5,003	What are your client's reason for using this old piece of software? Would it be easier/simpler to persuade him to upgrade to something more secure?

16 Jan 2014, 04:21 AM	#4
erck2014 Junior Member Join Date: Jan 2014 Posts: 4	I am pretty sure I did not intend to make an argument whether PLAIN or SECURE is a better solution. So I don't really care how the technologies work or what makes them better. I will try to explain my dilemma different. The free pop3/smtp service thru Inbox.com started out as a good solution for my "software" because Inbox.com is the one solution that seems to support PLAIN authentication (meaning ports 110 and 25 and 587). Similar solutions thru almost every other alternative seems to have jumped on the secure bandwagon and replaced PLAIN with SSL/TLS. (other ports besides 110 and 25 and 587). Recently, the service uptime thru Inbox.com has become a major concern so now I need another alternative exactly like Inbox.com. I am not a software developer, so I am unable to change the limitations of "my software", otherwise I would and be done with it. I am just a support technician trying to avoid leaving my client up s**t creek.

17 Jan 2014, 06:59 AM	#6
erck2014 Junior Member Join Date: Jan 2014 Posts: 4	Thanks for staying with this thread, much appreciated. Very interesting approach I shall give this a try. Just when you think the neat tools are only available to high-paid, high-budget network admins...freeware manages to undermine conventional wisdom. I like it. In the meantime, if anyone locates a solution like Inbox.com, please share.

18 Jan 2014, 01:14 AM	#7
erck2014 Junior Member Join Date: Jan 2014 Posts: 4	Update on this; I installed stunnel and spent less than an hour learning the config. First I tested with Live.com. The connection was successful but after a while their server gave a warning about too many connections within 15 minutes. Quotas won't work for me, so scrapped that idea. Gmail was successful, no quota. So I'm happy.