--- qmail-popup.8.orig 1998-06-15 +++ qmail-popup.8 2007-03-21 --- .././qmail-1.03/qmail-popup.8 Mon Jun 15 12:53:16 1998 +++ ../qmail-1.03.2418/qmail-popup.8 Wed Feb 1 22:49:44 2006 @@ -12,12 +12,12 @@ .IR subprogram . .B qmail-popup -is most commonly invoked from -.B inetd +typically from +.B tcpserver as .EX - qmail-popup CHANGEME checkpassword qmail-pop3d Maildir + tcpserver 0 pop3 qmail-popup CHANGEME checkpassword qmail-pop3d Maildir .EE with @@ -53,6 +53,18 @@ Even if you use APOP, an active attacker can still take over the connection and wreak havoc. + +However, +.B qmail-popup +can be adviced to use a TLS encrypted session by means of the environment variable UCSPITLS. +In this case, +.B qmail-popup +communicates with +.B sslserver +instead of the +.B tcpserver +program interface through a control socket, a reading and a writing pipe dynamically +defined during the session start to be used for transport layer encryption. .B qmail-popup has a 20-minute idle timeout.