1 |
Michael Crute wrote: |
2 |
> On 7/31/06, Alexander Skwar <listen@×××××××××××××××.name> wrote: |
3 |
>> Suranga Kasthuriarachchi wrote: |
4 |
|
5 |
>> > Which is the best for organization mail server. |
6 |
>> |
7 |
>> NOT qmail - too many holes and not good performancewise. |
8 |
|
9 |
> I would beg to differ with the statement about security. Qmail is |
10 |
> arguably THE MOST secure mail server |
11 |
> (http://cr.yp.to/qmail/guarantee.html). |
12 |
|
13 |
Actually, it is NOT. DJB made this statement but he doesn't |
14 |
stand to it. See http://home.pages.de/~mandree/qmail-bugs.html |
15 |
for a quite big collection of bugs and RFC violations of qmail. |
16 |
|
17 |
To quote from that page: |
18 |
|
19 |
| The security guarantee is a smoke ball. Several people, among |
20 |
| them Wietse Venema and Georgi Guninski, have documented exploitable |
21 |
| qmail security bugs, yet the USD 500 have never been paid to either |
22 |
| of them. |
23 |
|
24 |
Bye, |
25 |
|
26 |
Alexander Skwar |
27 |
-- |
28 |
"I'm in Pittsburgh. Why am I here?" |
29 |
-- Harold Urey, Nobel Laureate |
30 |
-- |
31 |
gentoo-user@g.o mailing list |