A mechanism is used which validates the server before passing potentially compromising client credentials. Relative POP URLs Relative POP URLs are not permitted. 2384 POP URL Scheme August 1998 6. The following examples demonstrate how a POP client program might translate various POP URLs into a series of POP commands. Security considerations related to authenticated URLs are discussed in section 4 of this document.
Many email clients store the plain text password for later use after logging into a POP server.
Such clients MUST NOT use a stored password in response to a POP URL without explicit permission from the user to supply that password to the specified host name. 2384 POP URL Scheme August 1998 10. 2384 POP URL Scheme August 1998 12. 2384 POP URL Scheme August 1998 13. All Rights Reserved.