Re: [Postfixadmin-devel] config.local.php not being read.

[David G. <da...@co...>]

tan...@li... wrote :
> On 4/13/2009 3:14 PM, Christian Boltz wrote:
> > Final note: If we want to use md5 for the setup password, we should 
> > switch _now_ so that less users are affected.
> 
> I thought this would be optional... ? You're saying everyone would be
> FORCED to do so?
> 

Yes. The setup_password is a mandatory step now. Failing to do it
leaves a big security hole open when ever a user upgrades (especially
if it's automatic via e.g. apt)

David.

-- 
David Goodwin 

[ david at codepoets dot co dot uk ]
[ http://www.codepoets.co.uk       ]