Re: Security alert: disable CRAM-MD5 if you don't use it

Jorge Bastos <[email protected]> Sat, 20 Dec 2014 13:57:38 -0000

Newsgroups	gmane.mail.imap.dbmail
Message-ID	<[email protected]>

> On 19-12-14 22:55, Paul J Stevens wrote:
> > You should disable CRAM-MD5 in dbmail.conf if you store password
> encrypted.
> ehh.. how? by setting 'capability'?

Hi Casper,

Yes, overwrite capability with the string you get after login, and remote
CRAM-MD5.

lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.