> I am looking to use either Cyrus or Dovecot for both SASL authentication and > IMAP. While Postfix 3.1.0 supports both, I was wondering which to prefer if > security is my most important deciding factor ? Does one have a better track > record than the other ?
They are both quite secure, I can’t say which one is better. Dovecot is a lot easier to set up, however. Straightforward setup usually translates to less mistakes and errors. Cyrus has longer history while Dovecot is quite fresh. Long history means longer track record, but also all kinds of backwards compatible kludges that add bulk and complexity. Dovecot is the most popular choice at the moment, as far as I can tell. Cyrus is popular in really large setups like ISPs and universities where performance is the top priority. They have also dedicated staff to study and maintain their systems. br, Petri
