On 13/02/2025 19:30 EET Sean McBride via dovecot
<dovecot@dovecot.org> wrote:
On 12 Feb 2025, at 13:52, Michael Slusarz wrote:
>> It says here https://www.dovecot.org/bugreport-mail/ that bug
reports should go to this list. Does that apply to suggestions too?
Assuming so...
>
Best practice these days is to file a bug report (or MR) to
GitHub.
I guess that web page needs updating too then. :)
Do note: as mentioned in another message to the list I just
sent, the mission of the Dovecot documentation is to
document how the software works. It is not to document
email server hosting best practices. Determination of which
PW hashing algorithm to use seems to be in the latter
category. (Documenting that Dovecot supports argon2id is in
scope per the former, but it sounds like we did our job
there.)
I take your point, but if you're going to give an example (there are
2 given already), why not at least have the example use the best
practices? Phrased alternatively, why is it better that the example
uses MD5 instead of Argon?
Here's my PR:
https://github.com/dovecot/documentation/pull/1172
Sean
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org
Also as generic note that ARGON2 is usually not very good choice as it tends to
use much memory and CPU (as intended), making it not ideal for systems that are
constantly logging in & out. At least you need to tune down the effirt factor
so it is fast enough.
Aki
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org
