21 Apr
2026
21 Apr
'26
11:10 a.m.
Hello, I don't know about actually fully disabling SSL requirements but I do know that dovecot supports logging everything in an IMAP session if that would also help. [1]https://doc.dovecot.org/2.4.3/core/admin/rawlog.html [2]https://doc.dovecot.org/2.4.3/core/summaries/settings.html#rawlog_dir Best, David On 2026-04-21, 01:44 David Koski via dovecot <dovecot@[3]dovecot.org> wrote:
Hello,
In spite of:
ssl = no
auth_allow_cleartext = yes
..in a telnet session, I get:
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
LITERAL+ STARTTLS LOGINDISABLED AUTH=GSSAPI AUTH=CRAM-MD5] Dovecot
(Debian) ready.
a1 login ln@[4]zample.com <super-secret>
* BAD [ALERT] Plaintext authentication not allowed without SSL/TLS, but
your client did it anyway. If anyone was listening, the password was
exposed.
a1 NO [PRIVACYREQUIRED] Plaintext authentication disallowed on
non-secure (SSL/TLS) connections.
I need to see the network traffic to troubleshoot the way Outlook 2019
handles IMAP folders.
Regards,
David Koski
dkoski@[5]sutinen.com
_______________________________________________
dovecot mailing list -- dovecot@[6]dovecot.org
To unsubscribe send an email to dovecot-leave@[7]dovecot.orgReferences
Visible links