SMTP AUTH (cont)

• based on Simple Authentication and Security Layer (SASL, RFC-2222)

• SASL uses plugins to define auth mechanisms

  • plaintext password: PLAIN (more on this later)
  • shared secret: CRAM-MD5, DIGEST-MD5
  • kerberos: KERBEROS_V4, GSSAPI