I'm setting up Cygwin, and one of the packages I'm using is 'email' for, what else, sending e-mail from a script.
I've "improved" one of my concerns about email's configuration, by copying
/etc/email/email.conf to a directory within my home directory, rather than editing that default config file with my settings (i.e. user name and password, primarily.) However, it still gives me the heebie-jeebies to type my cleartext SMTP password into a text file, even if it's
The email command has the -i (or -smtp-pass) parameter, to which I could attach the password inside the calling script, but that's not really any better because it's still cleartext in a text file.
Also, the email command does allow for setting
smtp-auth='LOGIN', and it will prompt for the password, but I would prefer (require?) prompt-less operation of the script, so that I can automate it later.
What's the best way to address this issue of having to store a cleartext password in a config file (or script)? This is Cygwin, so is it best to simply address this from the Windows side, and ensure the Security permissions on that file are restricted to just me? (i.e. remove the default read access granted to the "Users" group, et al) Or is there a more common/appropriate way of dealing with this?