Auth Security

Behavioral credential-compromise detection. authwatchd watches per-SASL-credential sending behavior — recipient-domain bursts (list-blasting), spam/block bounce-rate spikes, and volume far above the credential's recent norm — and flags compromise-shaped changes. On a shared relay one credential serves every client, so per-credential signals are coarse and locking is drastic (auto-lock is off by default).

Loading…