Hi Rolf I'm sorry for getting back so late to you (I did not receive your email via the bugtracker)!
Please note the following from esmtprc manpage:
------------------------------------------------------------------------
username
Set the username for authentication with the SMTP server.
Do NOT set the username and password in the system configuration
file unless you are the only user of this machine. Esmtp is not
run with suid privileges therefore the system configuration file
must be readable by everyone. If your SMTP server requires
authentication and you are not the only user then specify your
personal SMTP account details in the user configuration file.
password
Set the password for authentication with the SMTP server.
------------------------------------------------------------------------
This is by design of esmtp needed, that the global configuration file
is word-readable. If you are not the only user of the system, then
username/password configuration should be done on per user-basis in
~/.esmtprc.
What I will do is the following: I will add a more clear statement
about this probably in the README.Debian file and add too a news
entry.
Bests
Salvatore
signature.asc
Description: Digital signature
