why require APOP for virtual domains?

[Jonathan Walther]

-----BEGIN PGP SIGNED MESSAGE-----

- From the VIRTUALS file:

========
User can't authenticate through USER/PASS (APOP/SASL) mechanism
if his/her password (APOP/SASL secret) is empty.
========

Why is that?  Can I put any APOP secret in the database?  Does
the user have to know it?  I've never needed to use APOP before.
Why now?


- --
I am working to subvert from within ...
umm ...  by writing shoddy code ... and
charging too much.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBO4P2OcK9HT/YfGeBAQE+jwP9FTtuOLSVuM6ONU1YeaSgmiuPfMFRakvA
NwQIT1f+x9Vu2zQpeQtx+x6JbsNXkFbtM0NZ7RzUpf2d7s5B2xAz56mJqjZy5EWv
5b2r/R9Euxe7tZLjzh52oWzBzbsK/olHQg8fUpreuHx51EjVkPqMLZkTP6pKh0UW
8ZXw0213/9Q=
=spDP
-----END PGP SIGNATURE-----