Saslauthd is only capable of verifying plaintext passwords

:blobcatsleepless:

Follow

@icedquinn Not good, is that the same SASL that IRC uses ? Do you have a link to this, please ?

@zleap > link
https://www.cyrusimap.org/sasl/sasl/faqs/crammd5-digestmd5-scram.html

> IRC
no. SASL is just a framework for authentication. this is one daemon that sits behind SASL which happens not to hash passwords. i think other parts of cyrus are able to do so. SASL definitely allows it.

@icedquinn ah thanks, still not good given it is now 2021, and people are still storing stuff in plain text, more users need to learn it is bad, why and hold those that do this to account.

To me there is zero excuse.

@zleap it looks like cyrus also supports one time keys via OPIE, not sure if it supports modern TOTPs. There is also kerberos but kerberos tends to store passwords in plaintext too.

:blobcatthonking:

SASL does have a spec for oauth tokens.

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.