Sending emails via msmtp, plain text password concerns
Posted: Thu Dec 12, 2024 11:26 am
Hi all!
I managed to configure Zoneminder to send alert emails to my g maiI account, first enabling two steps authentication and getting an app password. But I had to include that password in plain text in the msmtprc file, located at /etc/. Should I be worried about this?
When I test sending emails from the command line, I can sucessfully use the 'passwordeval' parameter in /etc/msmtprc file, instead of the 'password' parameter (previously setting a public key with gpg), so that the system can decrypt the password each time it needs it. For this it usually asks me for the passphrase. With this configuration, I zoneminder can not send emails, reporting this:
So my question is, can I use the passwordeval parameter to use the encrypted password with zoneminder? And if not, is there any security risk by using passwords in plain text?
INFO of my system:
AMD Rizen 5
Debian bookworm
Zoneminder 1.36
CONFIGURATION of zoneminder: same as stated here bkjaya , which is the same as followed by @robfish zmforum too.
I managed to configure Zoneminder to send alert emails to my g maiI account, first enabling two steps authentication and getting an app password. But I had to include that password in plain text in the msmtprc file, located at /etc/. Should I be worried about this?
When I test sending emails from the command line, I can sucessfully use the 'passwordeval' parameter in /etc/msmtprc file, instead of the 'password' parameter (previously setting a public key with gpg), so that the system can decrypt the password each time it needs it. For this it usually asks me for the passphrase. With this configuration, I zoneminder can not send emails, reporting this:
Code: Select all
Unable to send email: error closing /usr/lib/sendmail: Broken pipe (exit -1)INFO of my system:
AMD Rizen 5
Debian bookworm
Zoneminder 1.36
CONFIGURATION of zoneminder: same as stated here bkjaya , which is the same as followed by @robfish zmforum too.