Re: [Postfixadmin-devel] Default encryption method

[David G. <da...@co...>]

> While reading the commit message, I noticed that the default value=20
> is "md5crypt". I'm not sure if this is a good idea - I don't even know=20
> if (or how) Postfix supports this...
>=20
> Should we change the default? If yes, to what?
>=20

Presumably yes - there's no point in having a 'wrong' setting, it'll
trip users up :)

> And: how to avoid breakage on existing installations?

Mention something through upgrade.php - i.e.=20

echo "Blah changed to blah in this revision; this may break blah blah";

> For example, I only override some settings in config.local.php and let=20
> everything else in config.inc.php unchanged. This means I use the SVN=20
> version of config.inc.php and have some fun when a default changes...


I don't know if md5crypt is 'good' or 'bad'; I although thought that
Postfix (itself) didn't normally have anything to do with the user's
mailbox password - unless you are using SMTP AUTH. (i.e. in most cases,
the encryption methods you can use are governed by the IMAP/POP3
daemon(s))

David.


--=20
David Goodwin=20

[ david at codepoets dot co dot uk ]
[ http://www.codepoets.co.uk       ]