loopingz / smtp-relay

SMTP Toolbox
GNU Lesser General Public License v3.0
29 stars 3 forks source link

Add basic auth example #62

Closed portswigger-katie closed 12 months ago

portswigger-katie commented 12 months ago

Changes

Update the readme with an example of a basic auth implementation for the aws-smtp-relay.

loopingz commented 12 months ago

Hi, thank you for your contribution.

I will update a few things: By default, it is better to use a hash method like sha256 to avoid using the plain password.

I think the Dockerfile env example should be replaced by a docker -e ... to avoid having an image baked with some credentials (I know you are referring to Helm afterward)

I think there is a flag you can use also to enable authentication without requiring SSL, I need to find it (although it is not recommended to send credentials unencrypted, I can see a case as a local relay listening to only 127.0.0.1)

I'll have a look today

loopingz commented 12 months ago

I did use another branch to include your commits and my fix and merged.

Thank you for your contribution