feature request: support STARTTLS for LMTP preauth'd connection
qiuyingbo at gmail.com
Tue Jun 14 05:16:14 EDT 2016
I use "lmtpd -a" listen on a NIC interface and receive lmtp request from a
remote postfix instance. Now preauth works, but mail data was transfered
I guess the commit your mentioned disabled startssl because the author
think we just need ssl to protect PLAIN Password auth request.. Personally,
I think all mail data should be encrypted in internet transfer.
On Tue, Jun 14, 2016 at 9:25 AM, ellie timoney via Cyrus-devel <
cyrus-devel at lists.andrew.cmu.edu> wrote:
> On Wed, Jun 1, 2016, at 03:28 AM, qyb via Cyrus-devel wrote:
> I noticed that cyrus disable TLS on preauth'd connection.
> Authentication info(plain password...) need TLS protection. And I think
> that RFC822 text also need TLS.
> Can you expand on this a bit?
> As far as I understand, connections are only ever preauth'd when they come
> in via UNIX-domain sockets, which are inherently local. What are you
> trying to protect, and from whom?
> For what it's worth, it looks like STARTTLS used to work (at least to some
> degree) for preauth'd LMTP, but was explicitly disabled in 2001 by this
> So I guess you might be able to re-enable it by doing the inverse of that,
> though I'm not really seeing the point?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Cyrus-devel