Docs and example suggest running aiosmtpd INSECURELY
Offen
documentation
- Vorherrschende Sprache
- Python
- Sterne
- 373
- Forks
- 105
- Ø Merge
- 4 Min.
- Gemergte PRs (30 T.)
- 2
Beschreibung
The authenticated relayed example does NOT actually required authentication to relay.
The docs suggest a similar setup that is INSECURE.
This is a major issue, people will implement their system incorrectly. It will look like it works as using wrong login/password will correctly reject, but using no auth at all will incorrectly accept incoming mail.
This can be fixed for example by checking `session.authenticated` in `handle_RCPT` or `handle_DATA`.
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.