Re: [Exim] SMTP auth, MySQL & passwords stored in clear

Hi Konrad, on Wed, 07 Jan 2004 16:20:35 +0000 you wrote:

> This seems to work fine, except for one thing: the passwords in the
> database have to be stored in plain text
...
> The other thing that has got me flummoxed is getting the same
> authenticator working for cram_md5

If you are going to be using CRAM-MD5 at all, you are going to have to
keep the passwords in plaintext on the server. (This is not a limitation
of Exim; it's to do with the algorithm, which requires the plaintext
password to be available at the server end in order to compute a hash)


Tim