[Enigmail] [off topic] multiple passwords for the same service

Robert J. Hansen rjh at sixdemonbag.org
Sun Oct 19 22:01:55 PDT 2008


Eitan Adler wrote:
> I hope I am making myself clear.

The usual argument is that passwords should protect capabilities, not
mechanisms.  E.g., if you're accessing your email via HTTPS through a
web browser or through an IMAP/S connection, either way you have the
same capabilities: you can read your email, write email, manage your
folders, etc.

But if you wanted to use the same password on your company Exchange
server that you use on for your personal account, that could be unwise.
 The Exchange server controls your address book, your schedule, your
calendar, etc.; the Exchange capability profile is different than the
IMAP/S capability profile, so the two should have different passwords.




More information about the Enigmail mailing list