send mail - encrypt password

[developer_resea]

Hello,

     I am using Alfresco configurated for send notifications (emails). According to what I have reviewed, Alfresco can only sends from a single account defined in 'alfresco-global.properties':

mail.host=
mail.port=
mail.username=
mail.password=contraseña
mail.encoding=
mail.from.default=
mail.smtp.auth=
mail.smtp.timeout =

     I tested this feature and works fine but what worries me is the security: Is possible to use an encrypted value instead of plain text for the 'mail.password' property?

Thanks in advance,

[mrogers]

That's the password used to connect to your outbound email server.

As the first line of defence you should restrict access to the server running alfresco and secure your alfresco configuration such that prying eyes cannot read or modify the alfresco configuration files.    The only account that should have access is Alfresco itself and the account that is used to back up your server.

In addition you may also configure SSL for communication to your email server.   And depending upon your email server and firewall settings you may be able to restrict connection to the email server to certain hosts.

It will be fairly easy to plug in an enhancement to store those authentication details in a keystore however that is not provided OOTB.