atom feed5 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Only 8 characters...
FromSent OnAttachments
Andreas GrabnerSep 26, 2007 9:03 am 
Lisa MuirSep 26, 2007 9:30 am 
Andreas GrabnerSep 26, 2007 9:59 am 
Johnny C. LamSep 26, 2007 11:09 am 
Andreas GrabnerSep 27, 2007 1:18 am 
Subject:Re: [courier-users] Only 8 characters of the password required
From:Lisa Muir (34.2@gmail.com)
Date:Sep 26, 2007 9:30:49 am
List:net.sourceforge.lists.courier-users

On 9/26/07, Andreas Grabner <andr@vianova.cc> wrote:

Hello,

I have just figured out that only the first 8 characters of passwords are significant and the rest is irrelevant. Have i missed some configuration? I think this is a security issue.

In my experience, this would indicate that you're encrpting passwords with the CRYPT function, try using SHA or MD5 instead to avoid the 8 character limitation, but bear in mind that you loose a certain amount of system portability with your passwords which may or may not be an issue.

HTH,

Lisa.