Panasonic Workio DP-3030, Руководство по обслуживанию

Страница: 431 / 486

431
DP-2330/3030
MAR 2005
Ver. 2.1
DP-2310/3010
The POP3 client makes note of this timestamp, and then issues the APOP command. The "name''
parameter has identical semantics to the "name" parameter of the USER command. The "digest" parameter
is calculated by applying the MD5 algorithm to a string consisting of the timestamp (including angle-
brackets) followed by a shared secret. This shared secret is a string known only to the POP3 client and
server. Great care should be taken to prevent unauthorized disclosure of the secret, as knowledge of the
secret will allow any entity to successfully masquerade as the named user. The "digest" parameter
itself is a 16-octet value which is sent in hexadecimal format, using lower-case ASCII characters.
When the POP3 server receives the APOP command, it verifies the digest provided. If the digest is correct,
the POP3 server issues a positive response, and the POP3 session enters the TRANSACTION state.
Otherwise, a negative response is issued and the POP3 session remains in the AUTHORIZATION state.
Note that as the length of the shared secret increases, so does the difficulty of deriving it.
Client Server
+OK maildrop has 1 message (369 octets)
+OK 1
STAT
Establish TCP connection (TCP port No. 110)
+OK POP3 server ready <1896.697170952@svr.pcc.co.jp>
APOP USER c4c9334bac560ecc979e58001b3e22fb
Digest parameter, Cha PASSWD
<1896.697170952@svr.pcc.co.jp>PASSWD
Produces a 16 octet digest value of
c4c9334bac560ecc979e58001b3e22fb
Challenge Response
<1896.697170952@svr.pcc.co.jp>
Possible Responses:
+OK
-ERR permission denied
Continue to follow the POP3 procedure
APOP overview