Explorar o código

reflect change of default for auth.type

Peter Bieringer hai 11 meses
pai
achega
9f8ac21130
Modificáronse 1 ficheiros con 1 adicións e 0 borrados
  1. 1 0
      CHANGELOG.md

+ 1 - 0
CHANGELOG.md

@@ -18,6 +18,7 @@
 * Improve: catch htpasswd hash verification errors
 * Improve: add support for more bcrypt algos on autodetection, extend logging for autodetection fallback to PLAIN in case of hash length is not matching
 * Add: warning in case of started standalone and not listen on loopback interface but trusting external authentication
+* Adjust: Change default [auth] type from "none" to "denyall" for secure-by-default
 
 ## 3.4.1
 * Add: option [auth] dovecot_connection_type / dovecot_host / dovecot_port