mortal / aiopopd Goto Github PK

I have run aiopopd on my server for about a month now and using lsof I can see that the python process has 2138 open files. Most of these are pipes.

After restarting aiopopd it only has 98 files open.

There is probably a resource leak somewhere.

When proxying a remote IMAP server, plain text authentication is a security risk, even over TLS. If upstream IMAP server and downstream POP client supports CRAM-MD5 and the downstream POP client does not verify that the challenge data contains the server's fully-qualified primary host name (as required by the RFC), then we can use that instead of plain text authentication.

The readme states under Security concerns:

By giving your IMAP password to Gmail, you are giving your IMAP password to Gmail.

Should one of those Gmails have been aiopopd?