Update 1.34: Credentials stored encrypted, Mesa
Updated
Sensitive settings such as mail-server passwords no longer sit in the database as plain text, the existing ones included.
Neu:
Stored encrypted:
Settings flagged as sensitive are written encrypted. Anyone reading the database no longer reads a password.
Existing values too:
Plain-text values already in place were converted along the way. A value that was already encrypted stays untouched. The conversion may run twice without doing harm.
One boundary instead of three:
Encrypting and decrypting happen at exactly one place in the code. There used to be three copies of the same method, and three copies are three chances to drift apart.