{"id":1668,"date":"2025-06-28T21:45:08","date_gmt":"2025-06-28T19:45:08","guid":{"rendered":"https:\/\/www.shukko.com\/x3\/?p=1668"},"modified":"2025-06-28T21:45:08","modified_gmt":"2025-06-28T19:45:08","slug":"disable-pop-imap-authentication-over-non-encrypted-connections-custombuild-improved-dovecot","status":"publish","type":"post","link":"https:\/\/www.shukko.com\/x3\/2025\/06\/28\/disable-pop-imap-authentication-over-non-encrypted-connections-custombuild-improved-dovecot\/","title":{"rendered":"\u00a0Disable POP \/ IMAP authentication over non-encrypted connections\u00a0custombuild\u00a0improved dovecot"},"content":{"rendered":"\n<p>The Dovecot configuration is updated to block non-encrypted connections to the POP and IMAP services.<\/p>\n\n\n\n<p>This change protects the clients from accidentally misconfiguring email applications to not use encrypted connections. The connections from localhost (not going over the network) are still allowed to not use encryption.<\/p>\n\n\n\n<p>Backwards compatibility with insecure mode can be managed with a drop-in Dovecot configuration file. Examples:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Allow plain-text POP\/IMAP connections for Dovecot 2.4:\necho 'auth_allow_cleartext = yes' &gt; \/etc\/dovecot\/conf.d\/insecure-auth.conf\nsystemctl restart dovecot\n\n# Allow plain-text POP\/IMAP connections for Dovecot 2.3:\necho 'disable_plaintext_auth = no' &gt; \/etc\/dovecot\/conf.d\/insecure-auth.conf\nsystemctl restart dovecot\n\n# Restore original configuration (secure):\nrm -f \/etc\/dovecot\/conf.d\/insecure-auth.conf\nsystemctl restart dovecot<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>The Dovecot configuration is updated to block non-encrypted connections to the POP and IMAP services. This change protects the clients from accidentally misconfiguring email applications to not use encrypted connections. The connections from localhost (not going over the network) are still allowed to not use encryption. Backwards compatibility with insecure mode can be managed with [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1668","post","type-post","status-publish","format-standard","hentry","category-kategerisiz"],"_links":{"self":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/comments?post=1668"}],"version-history":[{"count":1,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1668\/revisions"}],"predecessor-version":[{"id":1669,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1668\/revisions\/1669"}],"wp:attachment":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/media?parent=1668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/categories?post=1668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/tags?post=1668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}