Date: 2026-07-14
SmtpUser (a login name) as the sender address when MailNewUserFromAddress is empty — a missing sender address is now caught and logged instead of being used to send a malformed email.SmtpPassword, ActiveDirectoryPassword, and the per-postbox ImapPassword, AzureClientSecret, DvApiPassword, DvApiSessionGuid) edited via ConfigurationEditor — which bypasses the version-gated configuration migration — are now automatically encrypted every time the configuration is loaded, closing a gap where such fields could remain stored as plaintext indefinitely.UseDocuvitaSmtp = true requires the docuvita user (DvApiUsername) to have System Administration rights, and documented the UseDocuvitaSmtp = false alternative (EN + DE).