Skip to content

Commit

Permalink
Note of security issue as per opensolutions/OSS-Framework#43 - spelling
Browse files Browse the repository at this point in the history
  • Loading branch information
barryo committed Apr 11, 2016
1 parent 166c13b commit bb39c7d
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions application/configs/application.ini.dist
Original file line number Diff line number Diff line change
Expand Up @@ -147,15 +147,15 @@ defaults.mailbox.min_password_length = 8
; scheme specified by XXX. To see available schemes, use 'dovecotpw -l'
; or 'doveadm pw -l'

; You should pick a hashing function as string as your mail system allows.
; You should pick a hashing function as strong as your mail system allows.
; At time of writing, Dovecot ( http://wiki2.dovecot.org/Authentication/PasswordSchemes ) recommends one of
; BLF-CRYPT, SHA512-CRYPT, SHA256-CRYPT in descending order of strength
defaults.mailbox.password_scheme = "dovecot:BLF-CRYPT"

; April 2016 - Bad salts - it was pointed out that a typo in the code below meant that
; the now deprecated md5.salted and sha1.salted (as opposed to their hyphenated versions above)
; didn't actually use the requested salt string but a fixed salt of "md5.salted" and "sha1.salted"
; respectivily. These options still work for backwards compatibility.
; respectively. These options still work for backwards compatibility.
; See:
; https://github.com/opensolutions/OSS-Framework/issues/43#issuecomment-207040421
; https://github.com/opensolutions/OSS-Framework/commit/b3d669a81f8214032a70e594472ece9fe9322fe2
Expand Down

0 comments on commit bb39c7d

Please sign in to comment.