From: "Joey Grasty" <jgrasty@gate.net>
Date: Fri, 21 Jul 95 20:11:28 PDT
To: Alex de Joode <usura@replay.com>
Subject: Re: big word listing
Message-ID: <199507220309.XAA22246@tequesta.gate.net>
MIME-Version: 1.0
Content-Type: text/plain


Alex sez:

> Is there a "challenge response" type of password/login available
> somewhere ?
> 

Post Office Protocol 3 (POP3) has an optional command called 
APOP which sends a string of the form "<process-ID.clock@hostname>".
The POP3 client calculates the MD5 digest of 
 
  <process-ID.clock@hostname>password

and sends it to the server as "APOP username 58349485whatever89583449".

I like it.

Regards,


--
Joey Grasty
jgrasty@gate.net [home -- encryption, privacy, RKBA and other hopeless causes]
jgrasty@pts.mot.com [work -- designing pagers]
"Anyone who considers arithmetical methods of producing random digits is,
of course, in a state of sin." -- John Von Neumann