Re: [Dbmail] Security alert: disable CRAM-MD5 if you don't use it

[Casper Langemeijer]

I imagined the capability string only was the advertised capabilities, 
so I checked the source. Nowhere in the dbmail source I see that 
CRAM-MD5 is actually disabled, but I could be missing the location. 
Could dbmail still authenticate a malicious client?
_______________________________________________
DBmail mailing list
DBmail@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail