try CRAM-MD5 auth if advertised by capabilities, then default to LOGIN

pulb / mailnag

An extensible mail notification daemon

GNU General Public License v2.0

253 stars 32 forks source link

try CRAM-MD5 auth if advertised by capabilities, then default to LOGIN #181

Closed jamespo closed 5 years ago

jamespo commented 5 years ago

This lets mailnag use CRAM-MD5 authentication for IMAP accounts if this advertised by the IMAP server through the capabilities string given on connection.

If CRAM-MD5 is not advertised the standard (plaintext) LOGIN method will be used as it is currently.

As well as being more secure, this also means that if server operators have disabled LOGIN method mailnag can still be used.

pulb commented 5 years ago

Thanks! :)