This repository has been archived by the owner on Dec 15, 2020. It is now read-only.
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request from GHSA-6g7f-8qm4-f7h8
When LOGIN authentication was used, Fleet would send SMTP credentials even if the connection the SMTP server was not secured via TLS. Copying the pattern used in the standard library PlainAuth implementation, we now only send credentials when the connection is secure or the server is localhost.
- Loading branch information