I recall seeing a large email corporation discourage POP client access, suggesting it was insecure.
Assuming this is not FUD meant to encourage adoption of their client, I am wondering whether either of these may be true:
- This has a basis in truth in that POP is insecure without the proper extensions, but POP can be as secure as any other method by use of the right extensions/protocols.
- There is something inherently defective as to security with the POP protocol even if the most secure extensions are used.
Might someone be able to offer a high level introduction to what, if any, issues POP may suffer from?