big word listing

Joey Grasty jgrasty at gate.net
Fri Jul 21 20:11:28 PDT 1995


Alex sez:

> Is there a "challenge response" type of password/login available
> somewhere ?
> 

Post Office Protocol 3 (POP3) has an optional command called 
APOP which sends a string of the form "<process-ID.clock at hostname>".
The POP3 client calculates the MD5 digest of 
 
  <process-ID.clock at hostname>password

and sends it to the server as "APOP username 58349485whatever89583449".

I like it.

Regards,


--
Joey Grasty
jgrasty at gate.net [home -- encryption, privacy, RKBA and other hopeless causes]
jgrasty at pts.mot.com [work -- designing pagers]
"Anyone who considers arithmetical methods of producing random digits is,
of course, in a state of sin." -- John Von Neumann






More information about the cypherpunks-legacy mailing list