FWIW this is addressed in svn with a new --protect-prompt option (which will do as much as possible to protect sensitive information that is entered at the command line, though at the moment that's only password entry). I won't be turning this on by default since it doesn't fit my used of swaks as a test tool (for which I want to see as much data as possible), but it should be easy enough for debian to set it as the default if you choose.
I also finally implemented an --auth-hide-password option to hide the password string in the terminal echo of the SMTP transaction when possible. Guess I need to do a release soon... -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

