How secure is Soupermail?
Soupermail is as secure as I know how to make it. However, this is no guarantee that its perfect, or that I’ve not made some dumb mistake in the code. As with all things you install on a server, check through the code yourself, just to see what its doing. Remember, Soupermail will only be as secure as the rest of your system, so if you’re worried about security, check that your server’s fully patched/hotfixed up, that its configured securely, that you know what all your CGIs are doing, and that all external executables haven’t been tampered with. If you don’t do this, don’t blame anybody else for security problems on your system. If you do find a security hole in the code, please let me know FIRST, before alerting any security lists. Email me at vittal.aithal@bigfoot.com, with Soupermail in the Subject, letting me know what system you’re running on, what the security hole is, and ideally an example of it in action. This’ll let me provide a fixed version on the site before script kiddie
