about summary refs log tree commit homepage
path: root/Documentation
diff options
context:
space:
mode:
authorEric Wong <e@80x24.org>2021-09-21 07:41:53 +0000
committerEric Wong <e@80x24.org>2021-09-21 19:18:35 +0000
commit3b23743ec90a4cb67dbc0b8bd94cc342c78e7a67 (patch)
treeb2a209864edbdbf0aa839de00a29f81247cd7291 /Documentation
parenta1cd0fccd40f1c2f0073c1e75ed3e8a26271dcd0 (diff)
downloadpublic-inbox-3b23743ec90a4cb67dbc0b8bd94cc342c78e7a67.tar.gz
Lots of stuff out there that becomes a pain to setup
configuration for and test...
Diffstat (limited to 'Documentation')
-rw-r--r--Documentation/lei-security.pod8
1 files changed, 8 insertions, 0 deletions
diff --git a/Documentation/lei-security.pod b/Documentation/lei-security.pod
index 4b712c2d..02305b90 100644
--- a/Documentation/lei-security.pod
+++ b/Documentation/lei-security.pod
@@ -99,6 +99,14 @@ While credentials are not written to the filesystem by default,
 it is possible for them to end up on disk if processes are
 swapped out.  Use of an encrypted swap partition is recommended.
 
+=head1 AUTHENTICATION METHODS
+
+LOGIN (username + password) is known to work over IMAP(S),
+as does AUTH=ANONYMOUS (which is used by L<public-inbox-imapd(1)>
+as part of our test suite).  AUTHINFO may work for NNTP, but
+is untested.  Testers will be needed for other authentication
+methods.
+
 =head1 DENIAL-OF-SERVICE VECTORS
 
 lei uses the same MIME parsing library as L<public-inbox-mda(1)>