Front cover - IBM Redbooks

SMTP service extension for authentication
When a client submits a message to an SMTP server that supports the SMTP
authentication extension, (AUTH=LOGIN), it will allow the client to authenticate
the user to the server. Also the extension preserves the authentication identity
when a message gets transferred from one SMTP server to another (assuming
that both SMTP servers support the extension). However, as mentioned earlier,
this user name password combination is only base64 encoded.
SMTP service extension for secure SMTP over SSL and TLS
SSL and TLS are popular mechanisms for enhancing TCP communications with
privacy and authentication. SSL and TLS are in wide use with the HTTP protocol,
and they are also used to add security to many other common protocols that run
over TCP.
TLS and SSL are very similar and are used in the same ways; the difference
between them is in the encryption algorthms they use. Instead of using MD5,
TLS uses the HMAC secure keyed message digest function.
When securing STMP over SSL or TLS, only the communication between the
two hosts is secure. It is not an end-to-end mechanism, and the transport from
the originating mail user agent to the recipient is not secured. The delivery of a
single piece of mail may go between more than two SMTP servers, so adding
SSL or TLS privacy to one pair of servers does not mean that the entire SMTP
chain has been made private.
Note: The SMTP service of Domino 6 supports several SMTP extensions,
including SSL negotiation over TCP/IP.
Enable SMTP extensions using the Lotus Domino Administrator or Lotus Notes
client as follows:
1. From the Lotus Domino Administrator (or from the Domino Directory screen in
the Notes client) click the Configuration tab. Select Messaging,
Configurations view.
2. Click either the Add Configuration or Edit Configuration button to open the
Configuration document.
3. Click the Router/SMTP tab, then the Advanced tab. This will provide access
to the advanced SMTP configuration settings, as shown in Figure 6-25 on
page 266.
4. From there you can configure SMTP extension features on your Domino
server.
Chapter 6. Public key infrastructures 265