2FA/MFA with IMAP & postfix/submission

Michael Peddemors michael at linuxmagic.com
Thu Jul 15 18:06:34 EEST 2021


On 2021-07-15 7:54 a.m., Laura Smith wrote:
> 
>> Are there multi-factor options available?
> 
> 
> Mandating good old-fashioned client-certificates is most likely your best bet in terms of delivering the best user-experience.
> 

Or, you can use the CLIENT_ID SMTP extension for dovecot/postfix.. For 
the record, still seeing 50-1 attempts against SMTP AUTH vs IMAP/POP 
AUTH attacks..

Completely transparent to the user..

Still need to see upstream implement the variable capabilities patch.. 
so that plugins can modify it..

But reach out if you want more details..




-- 
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.


More information about the dovecot mailing list