stolendata / little-peepo Goto Github PK

It support only IPv4, it is probably hard coded to use it explicitly. Changing LISTEN_IP to any format IPv6 address gives an error even if it's :: or ::1.

It can only use passwords in clear text. It will be good if also hashed/encryptet form was supported to protect passwords if the accounts file is stolen from the server.

• Authenticating currently does not set an exclusive lock on the account's mail storage
• E-mails that are retrieved but not deleted in the same session will remain in limbo in cur/, which happens with for example iOS (iPhone) Mail as it only offers to delete retrieved e-mails one or more days later

Certs from for example Let's Encrypt are updatet regularly but needs a software restart to be reloaded. Only accounts are reloaded when doing sighup. It would help if it reloaded both.