How to allow login to a SMTP server better than with password?

Question

I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me.

I'd love to use a certificate to login. This seems easy to do in HTTP, but I found no way to do it in SMTP. Is there any way to do it?

If not, is there another option than passwords? OAuth, 2FA or anything else?

Wesley · Accepted Answer · 2015-12-17 07:15:34Z

4

Look into client certificate validation for the SMTP server of your choice. For example, in Postfix you can use TLS client certificates as an authentication method.

answered Dec 17, 2015 at 7:15

Wesley

32.5k9 gold badges80 silver badges116 bronze badges

Add a comment |

natxo asenjo · Accepted Answer · 2015-12-17 07:23:12Z

2

kerberos (gssapi) or certificates are the options, I guess.

answered Dec 17, 2015 at 7:23

natxo asenjo

5,6892 gold badges26 silver badges27 bronze badges

Add a comment |

2 Answers 2