SMTP Password saved as plain text?

[justin (Justin DiRose)]

@pfaffman

If someone your don’t trust has access to your app.yml file your smtp password is the least of your worries.

As Jay said, if someone gets access to your app.yml, you have other problems. That means they likely have full root access to your server including your production database.

The best practice here would be making sure your server is secure.