On 16 Jan 2018, at 17:19 (-0500), J Doe wrote:
Hi,
I am looking to use either Cyrus or Dovecot for both SASL
authentication and IMAP. While Postfix 3.1.0 supports both, I was
wondering which to prefer if security is my most important deciding
factor ? Does one have a better track record than the other ?
None of us can tell you who you are...
There's no significant difference in security track record or code
maturity. Old-timers can remember when Dovecot was newish and Cyrus was
"The SASL Implementation" but that was a decade ago.
If you need *outbound* SASL support (i.e. authentication to an upstream
relay) then You can choose Cyrus or nothing. Otherwise, Dovecot is
easier to set up and with a commercial support entity behind it
(open-xchange.com) it is maybe less likely to fall into a stale periods
as Cyrus has at times. Both can be made to support very large
high-availability environments, both are reasonable choices for IMAP/POP
service.
There are almost certainly many niche feature differences that would
tilt a choice one way or the other for site-specific needs. We don't
know what those might be for you. Most of us are unlikely to be able to
give you a detailed specific comparison because we've mostly used one or
the other (or something else) exclusively.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Steady Work: https://linkedin.com/in/billcole
