SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports about indimail-mta

[Neustradamus]

@mbhangui: Thanks for your quickly answer and for your wishes.

I know that my tickets have a lot of links, it is to give all informations.

No problem for your time, I hope you will understand the goal: It is for security, MD5 is obsolete and unsecure.

It is already done in:

• Cyrus SASL / Cyrus IMAP
• Dovecot
• Exim
• Postfix with Cyrus SASL or Postfix with Dovecot SASL
• msmtp / mpop
• DataEnter CryptoFilter / DataEnter POPBeamer / DataEnter SMTPBeamer / DataEnter XWall
• NeoMutt
• SquirelMail
• SnappyMail
• MimeKit / MailKit
• ...

A more complete list here: scram-sasl/info#1

I add other informations linked to the request:

20 November 2008: CRAM-MD5 to Historic:
- https://tools.ietf.org/html/draft-ietf-sasl-crammd5-to-historic-00

29 June 2017: CRAM-MD5 to Historic:
- https://tools.ietf.org/html/draft-zeilenga-luis140219-crammd5-to-historic-00

July 2011: RFC6331: Moving DIGEST-MD5 to Historic:
- https://tools.ietf.org/html/rfc6331

August 2021: RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2:
"Replaced DIGEST-MD5 SASL mechanism with SCRAM-SHA-256. DIGEST-MD5 was deprecated."
- https://tools.ietf.org/html/rfc9051

[mbhangui]

Wishing you a very happy new year too and thank you for bringing this to my attention. I will have to do some reading on this and thank you for providing the various links. At the moment I'm working on a specific PR and when that is completed I will give this a reading and see how it can be implemented

[Neustradamus]

@mbhangui: Good news, it is a good day, it is official for -PLUS variants with TLS 1.3!

It is here: RFC 9266: Channel Bindings for TLS 1.3:

• https://tools.ietf.org/html/rfc9266

[mbhangui]

Closing this. SCRAM-SHA-1 and SCRAM-SHA-256 methods are now avaiable with completion of #32. The -PLUS methods are not being attempted as I find them complicated.