Isn't JBossMail a cert advisory waiting to happen
given some of the deficiencies in some of the mail specs? :-)
Nope. We take a dim view of things. So its presently not possible to configure it as an open relay even if you wanted to!
I added hashUserPassword in addition to hashStorePassword. You can now choose both or either.