Re: ucspi-tls for mailfront-0.96

On Tue, 30 Aug 2005 11:25:51 -0400
Scott Gifford <[email protected]> wrote:

> Charlie Brady <[email protected]> writes:
> 
> > On Tue, 30 Aug 2005, Josh Trutwin wrote:
> >
> >> My toaster is just humming along - thanks again.  Now if only I
could
> >> convince people to actually USE SSL/TLS...
> >
> > Denying relaying unless they do might inconvenience them enough to
> > encourage them to change. Of course, you'd notice the support load
in
> > the meantime.
> 
> Yeah, the mailfront patches support requiring TLS to authenticate,
so
> you could require authentication for relaying, then require TLS for
> authentication.
> 
> There's not an easy way to require TLS for relaying directly, but if
> it would be useful I could probably find a good hook to hang support
> for it on.

That's ok - it's more an education issue.  Explaining the benefits,
etc.  My client base is shared with someone else which makes these
kinds of issues difficult to manage.

Thanks,

Josh