Re: Fetchmail without passwords in plaintext file?

On Tuesday 11 December 2018 07:31:57 Bjoern Voigt wrote:

> Matthias Andree wrote:
> > There is no encryption option. You could use a .netrc file to save
> > passwords instead, but that would not be encrypted either.
> >
> > If you are running fetchmail from a shell (not from cron), you can
> > omit the passwords from .fetchmailrc and .netrc files, and fetchmail
> > will ask you for all of them. This should also work with daemon
> > mode, so you enter them once and fetchmail polls every N seconds
> > (whatever --daemon delay you give it).
>
> I think storing passwords unencrypted in files is an absolute no-go
> today. Business users and administrators may come into conflict with
> their company security policies. Especially users with unencrypted
> disks on laptops are are at high risk.
>
> The only work-around which I can recommend is a variation of Matthias'
> tip: Use a password manager and copy-paste passwords into fetchmail at
> start-up.
>
> But Matthias, why you refused to accept the following poll request?
> https://gitlab.com/fetchmail/fetchmail/merge_requests/1
>
> PWMD is probably not perfect (I haven't tried it), but it would be the
> first official solution for the unencrypted password storing problem,
> if Fetchmail would contain the libpwmd patches.
>
> Greetings,
> Björn
>
While I realize there is a need for encrypted passwd's in the more densly 
populated and/or industrial areas where business critical information 
might be sought by the shadier types, that need has not reached out here 
in the puckerbrush. Yet... I am not aware of any pop3 server in this 
moderately rural area, ever asking us to use encrypted passwds. Not 
saying there aren't such isp's but I've not encountered any yet.  What 
I'm saying is that forcing it on us, would force us to find another 
fetchmail like agent. In fact, they've not even forced us to longer 
passwds yet. I'd druther they did, to at least 20 alpha/numeric chars 
but too many winders users think 12345 or 54321Boom is good enough.
And they are the majority by far. I'm an island of all linux stuff here.
>
> _______________________________________________
> Fetchmail-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fetchmail-users



-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>


_______________________________________________
Fetchmail-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-users