oscerd opened a new issue, #2956:
URL: https://github.com/apache/camel-kamelets/issues/2956

   `mail-sink` hardcodes the plaintext SMTP scheme in its template:
   
   ```yaml
   - to:
       uri: "smtp:{{connectionHost}}:{{connectionPort}}"
   ```
   
   There is no `smtps`, `starttls` or equivalent property in `spec.definition`, 
so an operator has no way to select a TLS-capable transport — the credentials 
in `username`/`password` are always sent over an unencrypted connection unless 
the mail server happens to negotiate otherwise.
   
   The sibling `mail-imap-source` already uses the secure scheme 
(`imaps:{{connectionHost}}:{{connectionPort}}`), so the catalog is inconsistent 
here.
   
   Proposal: either switch the scheme to `smtps` with a matching default port, 
or add a transport/security property (defaulting to the secure value) that 
selects between `smtp` and `smtps`. Upgrade-guide note either way.
   
   Affected: `kamelets/mail-sink.kamelet.yaml`
   
   _Claude Code on behalf of Andrea Cosentino_
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to