For a better security, look the RFC6331: Moving DIGEST-MD5 to Historic: https://tools.ietf.org/html/rfc6331.
It is about DIGEST-MD5 (and CRAM-MD5 in the same time). You must to inform that SCRAM-SHA-XXX(-PLUS) is here! Regards, Neustradamus ________________________________ De : [email protected] <[email protected]> de la part de Viktor Dukhovni <[email protected]> Envoyé : samedi 7 septembre 2019 22:08 À : [email protected] <[email protected]> Objet : Re: SCRAM On Sat, Sep 07, 2019 at 07:59:34PM +0000, - Neustradamus - wrote: > It is old: http://www.postfix.org/SASL_README.html > > -> Promotion of old SASL. > > And there is: > > July 2011: RFC6331: Moving DIGEST-MD5 to Historic: > - https://tools.ietf.org/html/rfc6331 If there is specific documentation text you'd like to change, patches are welcome. Unless there's something Postfix-specific about using a particular SASL mechanism, the Postfix SASL documentation should strive to be mechanism-agnostic. So, for example, the text: These three plugins support shared-secret mechanisms i.e. CRAM-MD5, DIGEST-MD5 and NTLM. could be changed to read: These three plugins support shared-secret mechanisms (e.g., CRAM-MD5, DIGEST-MD5, ...). -- Viktor.
