What is dovecot's state of the art on password storage? Can we use bcrypt instead of plain text?
On 06/05/2024 10:42 EEST Rupert Gallagher via dovecot dovecot@dovecot.org wrote: What is dovecot's state of the art on password storage? Can we use bcrypt instead of plain text? _______________________________________________ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org Please have a look at the documentation about possible schemes: https://doc.dovecot.org/configuration_manual/authentication/password_schemes... Aki
Rupert Gallagher via dovecot skrev den 2024-05-06 09:42:
What is dovecot's state of the art on password storage? Can we use bcrypt instead of plain text?
yes if argon2 is compiled in dovecot
[I] net-mail/dovecot Available versions: 2.3.20-r1{tbz2} ~2.3.20-r2(0/2.3.20) ~2.3.20-r3(0/2.3.20) ~2.3.21(0/2.3.21) ~2.3.21-r1(0/2.3.21) {argon2 caps doc kerberos ldap lua lucene lz4 managesieve mysql pam postgres rpc selinux sieve solr sqlite static-libs stemmer suid systemd tcpd textcat unwind zstd LUA_SINGLE_TARGET="lua5-1 lua5-3"} Installed versions: 2.3.20-r1{tbz2}(00:57:56 04/29/24)(caps lua managesieve pam postgres sieve -argon2 -doc -kerberos -ldap -lucene -lz4 -mysql -rpc -selinux -solr -sqlite -static-libs -stemmer -suid -systemd -tcpd -textcat -unwind -zstd LUA_SINGLE_TARGET="lua5-1 -lua5-3") Homepage: https://www.dovecot.org/ Description: An IMAP and POP3 server written with security primarily in mind
is what i have in gentoo
participants (3)
-
Aki Tuomi
-
Benny Pedersen
-
Rupert Gallagher