From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <chris@the-brannons.com>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net
X-Spam-Level: 
X-Spam-ASN: AS6939 216.252.162.0/24
X-Spam-Status: No, score=-2.5 required=3.0 tests=AWL,BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI,SPF_HELO_PASS,
	SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2
Received: from hurricane.the-brannons.com (hurricane.the-brannons.com [216.252.162.32])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by dcvr.yhbt.net (Postfix) with ESMTPS id 30FAB1F852
	for <meta@public-inbox.org>; Thu, 22 Dec 2022 10:55:40 +0000 (UTC)
Authentication-Results: dcvr.yhbt.net;
	dkim=pass (1024-bit key; unprotected) header.d=the-brannons.com header.i=@the-brannons.com header.b="rxbcFsrI";
	dkim-atps=neutral
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=hurricane; bh=8S+IgL7tcj
	XuFMoL4a8E2aMuBbS3mgof+NtJSQ0+PPM=; h=in-reply-to:date:references:
	subject:cc:to:from; d=the-brannons.com; b=rxbcFsrIbf1WO+4LcnyvryFjtgcs
	qVJ+z+FlC1+LDaMv3L67En7ZQirvXhW13JdLC/dYelmovVO843kviNjMlT9e4zSgbP8tt1
	tpYQnQcll+CnZ63opSo+MS9oWm5SC3jqQBnOnXQe/f+Z4LgFPkib9qiG9nHMjQgW0nQohN
	zeQ=
Received: 
	by hurricane.the-brannons.com (OpenSMTPD) with ESMTPSA id d741f961 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) auth=yes user=chris;
	Thu, 22 Dec 2022 02:55:39 -0800 (PST)
From: Chris Brannon <chris@the-brannons.com>
To: Eric Wong <e@80x24.org>
Cc: meta@public-inbox.org
Subject: Re: dovecot fronting for public-inbox-imapd + private mail groups?
References: <87r0wsli5d.fsf@the-brannons.com> <20221221195421.GB5179@dcvr>
	<87ili4lb2w.fsf@the-brannons.com>
Autocrypt: addr=chris@the-brannons.com; prefer-encrypt=mutual; keydata=
 mDMEX37pCBYJKwYBBAHaRw8BAQdASkFrVm/MHGNpj7Oa+nq4b7eBg5LX5qnvS6ojH04ZE9+0LENo
 cmlzdG9waGVyIEJyYW5ub24gPGNocmlzQHRoZS1icmFubm9ucy5jb20+iJAEExYIADgWIQTFfzWT
 HzF7+QWPg09oJ1i8YNj4egUCX37pCAIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBoJ1i8
 YNj4esVsAQCJXDxhj5gZjcrNMmSH6Z+X5RDdbvsTRvS5wwQXM3g4kAEAjOrdx/fvZDiKL8dylDhU
 YUVVSkwWeOD2UtmYjm/QtwG4OARffukIEgorBgEEAZdVAQUBAQdAOMaQorDR8QUdM34/Q9mUyBvS
 9WFK0Mb76dHyNkERx2kDAQgHiHgEGBYIACAWIQTFfzWTHzF7+QWPg09oJ1i8YNj4egUCX37pCAIb
 DAAKCRBoJ1i8YNj4eo/8AQC4AX6NMv65KQQU7s95T/1Y4E+Z7KTbvhKJeSjdDfj88AEA/qzPnDvl
 dLmqqNTqsfZCK81teOxSoNhRlhWcQ8QQ/wY=
Date: Thu, 22 Dec 2022 02:55:38 -0800
In-Reply-To: <87ili4lb2w.fsf@the-brannons.com> (Chris Brannon's message of
	"Wed, 21 Dec 2022 13:07:51 -0800")
Message-ID: <87y1qzk8r9.fsf@the-brannons.com>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
List-Id: <meta.public-inbox.org>

Well, nginx as a mail proxy looks promising, but it doesn't yet work
with public-inbox-imapd.  Nginx sends the authentication information as
synchronizing literals [RFC9051, section 4.3].

So the login sequence looks similar to this example lifted from RFC9051
section 7.6:

     C: A001 LOGIN {11}
     S: + Ready for additional command text
     C: FRED FOOBAR {7}
     S: + Ready for additional command text
     C: fat man
     S: A001 OK LOGIN completed

I could potentially look into working up a patch, though my Perl is
rusty and more than 15 years out of practice.

-- Chris