Is POP3 unsecure?

[Qrup]

Hi all,

I'm running a mailserver on my debian sarge. I would like to know if there is a security issue when running pop3? When I'm scanning my IP with ShieldsUp" online portscanner, it tells me that the port used ny pop3 is unsecure. Is it or is it only unsecure if the port is not forwarded to my server running the pop3 mail server?

/Qrup

[falko]

I guess this is one of those paranoid portscanners that try to confuse users. No, POP3 is not unsecure. If you want encrypted connections instead, you can use POP3s.

[Qrup]

Ok.. I'll pipe down the paranoia. I'll trust that an updated postfix should be my garantee of security.

Thanks Falko

[till]

Originally Posted by Qrup

Ok.. I'll pipe down the paranoia. I'll trust that an updated postfix should be my garantee of security.

Postfix is not responsible for pop3, postfix is only an smtp server.

Your pop3 server is courier, ipop3d, qpopper or a similar daemon.