[GH-ISSUE #355] Remove historic CRAM-MD5 mechanism #304

New issue

Open

opened 2026-02-25 21:34:41 +03:00 by kerem · 3 comments

kerem commented

2026-02-25 21:34:41 +03:00

Owner

Originally created by @Neustradamus on GitHub (Sep 7, 2019).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/355

Originally assigned to: @Danelif on GitHub.

Dear @cypht-org team,

Can you remove CRAM-MD5 from the code?

https://github.com/search?q=repo%3Acypht-org%2Fcypht+cram-md5&type=code

It is unsecure:

Thanks in advance.

Originally created by @Neustradamus on GitHub (Sep 7, 2019). Original GitHub issue: https://github.com/cypht-org/cypht/issues/355 Originally assigned to: @Danelif on GitHub. Dear @cypht-org team, Can you remove CRAM-MD5 from the code? - https://github.com/search?q=repo%3Acypht-org%2Fcypht+cram-md5&type=code It is unsecure: - https://tools.ietf.org/html/draft-ietf-sasl-crammd5-to-historic-00 - https://tools.ietf.org/html/draft-zeilenga-luis140219-crammd5-to-historic-00 - https://tools.ietf.org/html/rfc6331 Thanks in advance.

kerem added the

Security

research

labels

2026-02-25 21:34:41 +03:00

kerem commented

2026-02-25 21:34:42 +03:00

Author

Owner

@jasonmunro commented on GitHub (Nov 12, 2019):

Thank you for the report, I I will look into it. Related: https://github.com/jasonmunro/cypht/issues/354

@jasonmunro commented on GitHub (Nov 12, 2019): Thank you for the report, I I will look into it. Related: https://github.com/jasonmunro/cypht/issues/354

kerem commented

2026-02-25 21:34:42 +03:00

Author

Owner

@marclaporte commented on GitHub (May 7, 2024):

@Danelif please advise

@marclaporte commented on GitHub (May 7, 2024): @Danelif please advise

kerem commented

2026-02-25 21:34:42 +03:00

Author

Owner

@Danelif commented on GitHub (Jun 4, 2024):

@Neustradamus @marclaporte
PR :
https://github.com/cypht-org/cypht/pull/1063
PS: i merged This PR by mistake so i reverted it.

@Danelif commented on GitHub (Jun 4, 2024): @Neustradamus @marclaporte PR : https://github.com/cypht-org/cypht/pull/1063 PS: i merged [This PR ](https://github.com/cypht-org/cypht/pull/1061) by mistake so i reverted it.