Saslauthd is only capable of verifying plaintext passwords
@icedquinn Not good, is that the same SASL that IRC uses ? Do you have a link to this, please ?
@zleap > link
https://www.cyrusimap.org/sasl/sasl/faqs/crammd5-digestmd5-scram.html
> IRC
no. SASL is just a framework for authentication. this is one daemon that sits behind SASL which happens not to hash passwords. i think other parts of cyrus are able to do so. SASL definitely allows it.
https://www.cyrusimap.org/sasl/sasl/faqs/crammd5-digestmd5-scram.html
> IRC
no. SASL is just a framework for authentication. this is one daemon that sits behind SASL which happens not to hash passwords. i think other parts of cyrus are able to do so. SASL definitely allows it.
Follow
@icedquinn ah thanks, still not good given it is now 2021, and people are still storing stuff in plain text, more users need to learn it is bad, why and hold those that do this to account.
To me there is zero excuse.
