X-Git-Url: https://diplodocus.org/git/nmh/blobdiff_plain/7d5df1b80b43bfe60de33b0b62c992eea1d8d531..459f09a7ac78cdf5b21773cf659cd0de6a76f44f:/man/inc.man

diff --git a/man/inc.man b/man/inc.man
index 4a06a7f6..3b25931e 100644
--- a/man/inc.man
+++ b/man/inc.man
@@ -32,9 +32,12 @@ inc
 \%[\-user\ username]
 \%[\-pack\ file]
 \%[\-nopack]
+\%[\-apop]
+\%[\-noapop]
 \%[\-kpop]
 \%[\-sasl]
 \%[\-saslmech\ mechanism]
+\%[\-snoop]
 .br
 %nmhendpop%
 \%[\-version]
@@ -150,6 +153,17 @@ For debugging purposes, you may give the switch `\-snoop', which will
 allow you to watch the POP transaction take place between you and the
 POP server.
 
+If nmh has been compiled with APOP #defined, the `\-apop' switch will cause
+\fIinc\fR to use APOP rather than standard POP3 authentication.  Under APOP, a
+unique string (generally of the format
+<\fIpid\fR.\fItimestamp\fR@\fIhostname\fR>) is announced by the POP server.
+Rather than `USER \fIuser\fR', `PASS \fIpassword\fR', inc sends `APOP \fIuser\fR
+\fIdigest\fR', where digest is the MD5 hash of the unique string followed by a
+`secret' shared by client and server, essentially equivalent to the user's
+password (though an APOP-enabled POP3 server could have separate APOP and plain
+POP3 passwords for a single user).  `\-noapop' disables APOP in cases where it'd
+otherwise be used.
+
 If nmh has been compiled with KPOP #defined, the `\-kpop' switch will allow
 \fIinc\fR to use Kerberized POP rather than standard POP3 on a given invocation.
 If POPSERVICE was also #defined to "kpop", \fIinc\fR will be hardwired to always