The memo does not include any requirements for authenticators to be phishing-resistant, even though DoD is required to retire phishable authenticators by 2027.

Does anybody know all the auth_types that are allowed in this config option and what they allow?<BR>I've looked all through Sendmail's site and googled but can't come up with anything other than TLS ...