topic send mail - encrypt password in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/send-mail-encrypt-password/m-p/268632#M221762 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp; I am using Alfresco configurated for send notifications (emails). According to what I have reviewed, Alfresco can only sends from a single account defined in 'alfresco-global.properties':</SPAN><BR /><BR /><SPAN>mail.host=</SPAN><BR /><SPAN>mail.port=</SPAN><BR /><SPAN>mail.username=</SPAN><BR /><SPAN>mail.password=contraseña</SPAN><BR /><SPAN>mail.encoding=</SPAN><BR /><SPAN>mail.from.default=</SPAN><BR /><SPAN>mail.smtp.auth=</SPAN><BR /><SPAN>mail.smtp.timeout =</SPAN><BR /><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp; I tested this feature and works fine but what worries me is the security: Is possible to use an encrypted value instead of plain text for the 'mail.password' property?</SPAN><BR /><BR /><SPAN>Thanks in advance,</SPAN></BODY></HTML> Mon, 13 Dec 2010 20:30:42 GMT developer_resea 2010-12-13T20:30:42Z send mail - encrypt password https://connect.hyland.com/t5/alfresco-archive/send-mail-encrypt-password/m-p/268632#M221762 Hello,&nbsp;&nbsp;&nbsp;&nbsp; I am using Alfresco configurated for send notifications (emails). According to what I have reviewed, Alfresco can only sends from a single account defined in 'alfresco-global.properties':mail.host=mail.port=mail.username=mail.password=contraseñamail.encoding=mail.from.default=mail.smtp.au Mon, 13 Dec 2010 20:30:42 GMT https://connect.hyland.com/t5/alfresco-archive/send-mail-encrypt-password/m-p/268632#M221762 developer_resea 2010-12-13T20:30:42Z Re: send mail - encrypt password https://connect.hyland.com/t5/alfresco-archive/send-mail-encrypt-password/m-p/268633#M221763 <HTML><HEAD></HEAD><BODY><SPAN>That's the password used to connect to your outbound email server.</SPAN><BR /><BR /><SPAN>As the first line of defence you should restrict access to the server running alfresco and secure your alfresco configuration such that prying eyes cannot read or modify the alfresco configuration files.&nbsp;&nbsp;&nbsp; The only account that should have access is Alfresco itself and the account that is used to back up your server.</SPAN><BR /><BR /><SPAN>In addition you may also configure SSL for communication to your email server.&nbsp;&nbsp; And depending upon your email server and firewall settings you may be able to restrict connection to the email server to certain hosts.</SPAN><BR /><BR /><SPAN>It will be fairly easy to plug in an enhancement to store those authentication details in a keystore however that is not provided OOTB.</SPAN></BODY></HTML> Mon, 13 Dec 2010 20:50:29 GMT https://connect.hyland.com/t5/alfresco-archive/send-mail-encrypt-password/m-p/268633#M221763 mrogers 2010-12-13T20:50:29Z