The allow-plaintext-access configuration variable

allow-plaintext-access controls whether it is possible to read or write mail via an unencrypted connection. It has three legal values, always, localhost and never.

always means that mail is accessible without encryption. localhost means that mail is accessible unencrypted from the host itself, and TLS is required from all other hosts. never always requires encryption, even when talking to a program running on the same host.

allow-plaintext-access is a string. Its default value is "always".

You can see its current value with the command aox show cf allow-plaintext-access.

String syntax

Strings may be written as a single unquoted word or quoted with either single or double quotes, as shown in these three examples:

db-password = single.word
db-password = "rock'n'roll" # a 12-character password
db-password = 'two words, quoted' # a 17-character one

Only single-line strings can be used. Single-word strings may contain the characters a-z, A-Z, 0-9, dot, hyphen and slash.

Spaces are allowed at the start of the line, before and after '=', and after the value. Comments extend from '#' to the end of the line.

In case of questions, please write to

About this page

Last modified: 2010-11-19