Re: [Dovecot] Accessing plain text password from memory

2013-12-17 Thread Philipp Brüll
Hi Timo, thanks for the answer. I'm working on a plug in with an similar architecture. Is there also a way to pass that plain password to a mail filter script? Obviously, the %w option as mail filter script argument does not work. Kind regards, Philipp On 13/12/13 15:47, Timo Sirainen wrot

Re: [Dovecot] Accessing plain text password from memory

2013-12-14 Thread Stanislas SABATIER
Thanks for the info, I'll dig this option. Regards, Stan. Le 13 déc. 2013 à 15:47, Timo Sirainen a écrit : > On 13.12.2013, at 16.37, Stanislas SABATIER wrote: > >> Is there a way to retrieve the client's password in plain text from memory ? >> >> I don't store the password in plain text in

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Rick Romero
Quoting Stanislas SABATIER : 2013/12/13 Rick Romero ​(…) IMHO, your time is better spent creating a PGP plugin that uses public keys to encrypt the email contents. Rick ​That's exactly what I'm doing. Inbound mails are all encrypted with each client's public key. Then, clients can eit

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Stanislas SABATIER
2013/12/13 Rick Romero > > ​(…) > > IMHO, your time is better spent creating a PGP plugin that uses public > keys to encrypt the email contents. > Rick > > > > ​That's exactly what I'm doing. Inbound mails are all encrypted with each client's public key. Then, clients can either decrypt mails on

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Rick Romero
As long as you're not claiming that you can't access the data, then I won't get uppity :) Though I honestly don't see any advantage to the approach you're taking. It was useless for Lavabit, it's a poor method that's not going to fair any better under anyone else's watch. Why not just z

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Stanislas SABATIER
Hi rick, I DO want to encrypt/decrypt mails on the fly without «lying » to my customers. It's better to have encrypted mail that are difficult to decrypt than plain text files within plain text folders. (Yes, it would be possible to get the user password on the fly, but my system is not design t

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Rick Romero
Quoting Stanislas SABATIER : Is there a way to retrieve the client's password in plain text from memory ? I don't store the password in plain text in my postgreSQL but I need it when the client is connected to make crypto computation. Hi Stan, I hope you're not trying to copy Lavabit. Sayin

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Timo Sirainen
On 13.12.2013, at 16.37, Stanislas SABATIER wrote: > Is there a way to retrieve the client's password in plain text from memory ? > > I don't store the password in plain text in my postgreSQL but I need it > when the client is connected to make crypto computation. > > If I write a plugin to do

Re: [Dovecot] Accessing plain text password from memory

2013-12-13 Thread Alan McGinlay - SICS
On 2013-12-13 15:37, Stanislas SABATIER wrote: Is there a way to retrieve the client's password in plain text from memory ? I don't store the password in plain text in my postgreSQL but I need it when the client is connected to make crypto computation. If I write a plugin to do the job, how

[Dovecot] Accessing plain text password from memory

2013-12-13 Thread Stanislas SABATIER
Is there a way to retrieve the client's password in plain text from memory ? I don't store the password in plain text in my postgreSQL but I need it when the client is connected to make crypto computation. If I write a plugin to do the job, how could I retrieve the plain text password from master