Re: Security alert: disable CRAM-MD5 if you don't use it

Casper Langemeijer <[email protected]> Sat, 20 Dec 2014 15:10:58 +0100

Newsgroups	gmane.mail.imap.dbmail
Message-ID	<[email protected]>

I imagined the capability string only was the advertised capabilities, 
so I checked the source. Nowhere in the dbmail source I see that 
CRAM-MD5 is actually disabled, but I could be missing the location. 
Could dbmail still authenticate a malicious client?

lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.