Dovecot mail-crypt webmail can't read encrypted messages

[Arjen de Korte]

Citeren Serveria Support <support at serveria.com>:

> Yes, there is a tiny problem letting the attacker change this value  
> back to yes and instantly get access to users' passwords in plain  
> text. Apart from that - no problems at all. :)

If an attacker is able to modify your Dovecot configuration, you have  
bigger problems than leaking your users' password. Much bigger...