Dovecot mail-crypt webmail can't read encrypted messages

Benny Pedersen me at junc.eu
Tue Oct 11 14:12:52 UTC 2022


Odhiambo Washington skrev den 2022-10-11 15:49:
> If you don't store cleartext passwords in your backend, how will an
> intruder get them??

auth_debug = yes
auth_debug_passwords = yes
auth_verbose = yes
auth_verbose_passwords = yes

then read log files if thats with world access

all the above should be no

first step to secure it

next step is to secure syslogs





More information about the dovecot mailing list