Is guid_mode: sha1 really gone from imapd.conf?

Andy Dorman adorman at ironicdesign.com
Mon Jan 16 23:28:34 EST 2017


Right.  Sha1 is getting a bit ancient and Blake2 is used in Argon2 which 
won the most recent password hashing competition.

Thanks for your time and all your work.

Andy

On 01/16/2017 05:13 PM, ellie timoney via Info-cyrus wrote:
> For what it's worth, looking at commit history, it looks like it went
> away sometime before 2.4.0
>
> On Tue, Jan 17, 2017, at 09:41 AM, Bron Gondwana via Info-cyrus wrote:
>> Yep, it's gone away - sha1 is the only mode right now.  We're going to
>> want to look at blake2 soon though I reckon.
>>
>> Bron.
>>
>> On Tue, 17 Jan 2017, at 03:48, Andy Dorman via Info-cyrus wrote:
>>> So the subject is the question...
>>>
>>> Running cyr_info conf-lint against our imapd.conf indicates "guid_mode"
>>> is gone and indeed, the imapd.conf man page doesn't mention it now.
>>>
>>> But many older versions of the man page do mention it and I can not find
>>> any mention in past release notes at
>>>
>>> http://www.cyrusimap.org/dev/imap/download/release-notes/index.html
>>>
>>> of it being deprecated or removed.
>>>
>>> So is it really gone or could it have been accidentally left out of the
>>> man page and conf-lint check code? I agree that is very unlikely, but
>>> with all the massive amount of excellent work that has been done by the
>>> Cyrus team in the last few years, sometimes a small thing like this can
>>> fall through a crack.
>>>
>>> Hopefully it will be OK just to remove the "guid_mode" sha1" line and
>>> restart and nothing will explode?
>>>
>>> Thanks and my apologies if the above is a really dumb question.
>>>
>>> --
>>> Andy Dorman
>>> Ironic Design, Inc.
>>> AnteSpam.com
>>>
>>> ----
>>> Cyrus Home Page: http://www.cyrusimap.org/
>>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>>> To Unsubscribe:
>>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>
>>
>> --
>>   Bron Gondwana
>>   brong at fastmail.fm
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>



More information about the Info-cyrus mailing list