Re: [Fetchmail-users] Fetchmail without passwords in plaintext file?

[Bjoern V. <bj...@ar...>]

Matthias Andree wrote:
> There is no encryption option. You could use a .netrc file to save
> passwords instead, but that would not be encrypted either.
>
> If you are running fetchmail from a shell (not from cron), you can omit
> the passwords from .fetchmailrc and .netrc files, and fetchmail will ask
> you for all of them. This should also work with daemon mode, so you
> enter them once and fetchmail polls every N seconds (whatever --daemon
> delay you give it).

I think storing passwords unencrypted in files is an absolute no-go
today. Business users and administrators may come into conflict with
their company security policies. Especially users with unencrypted disks
on laptops are are at high risk.

The only work-around which I can recommend is a variation of Matthias'
tip: Use a password manager and copy-paste passwords into fetchmail at
start-up.

But Matthias, why you refused to accept the following poll request?
https://gitlab.com/fetchmail/fetchmail/merge_requests/1

PWMD is probably not perfect (I haven't tried it), but it would be the
first official solution for the unencrypted password storing problem, if
Fetchmail would contain the libpwmd patches.

Greetings,
Björn