Hi, @LRLD . I double-checked with our team and
DIGEST-MD5
and CRAM-MD5
were intentionally removed, because they are considered weak in Dovecot 2.4 and cause issues with encrypted passwords and some email clients (e.g. Android-based - try to authenticate with DIGEST-MD5
, fails, and results in Fail2Ban bans). The plan is to bring back CRAM-MD5
by default in Plesk Obsidian 18.0.73 upt. 2. Later on they will create a way for users to manage auth schemes and disable them without Plesk overriding the changes.