From 9f8ac21130ba4c78c732c00c237ae752d4f2502e Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Sat, 15 Mar 2025 14:36:40 +0100 Subject: [PATCH] reflect change of default for auth.type --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index bf157773..b2069010 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -18,6 +18,7 @@ * Improve: catch htpasswd hash verification errors * Improve: add support for more bcrypt algos on autodetection, extend logging for autodetection fallback to PLAIN in case of hash length is not matching * Add: warning in case of started standalone and not listen on loopback interface but trusting external authentication +* Adjust: Change default [auth] type from "none" to "denyall" for secure-by-default ## 3.4.1 * Add: option [auth] dovecot_connection_type / dovecot_host / dovecot_port