On Fri, Sep 27, 2013 at 08:18:25AM +0100, Matthias Scheler wrote:
> > With sendmail this is done with:
> > PKG_OPTIONS.sendmail+=sasl tls
> > and rebuild sendmail. This should pull in cyrus-sasl.
>
> I would recommend to user neither Sendmail nor Cyrus SASL. Both have
> a very poor security track record. The combination of Postfix and
> Dovecot (for IMAP, POP3 and SMTP with TLS and authentication)
> works very well.
True. But both have not had serious issue for quite some time
(2009 for both sendmail and cyrus-sasl). There's been CVEs for
dovecot and postfix newer than that :)
--
Manuel Bouyer <bou...@antioche.eu.org>
NetBSD: 26 ans d'experience feront toujours la difference
--
