email password in clear text

[joximu]

Yes - it's a not very good thing.
The point is: the passwords are not read directly from the database, they are stored in other flatfile databases (eg userdb for courier) and it may be that this behaviour will change in the next version (either another mda or maybe direct connection to the database). I think that's why there are still clear text passwords in it.

The big but: if someone has access to have a look at theese passwords, then you also have other problems... maybe it would be good to use an encryption for the clear text passwords (same with the sql user passwords).

/J