Exim TLS security, DH and standard parameters

Phil Pennock <[email protected]> Sat, 8 Oct 2016 19:11:03 -0400
Newsgroups gmane.mail.exim.announce
Message-ID <[email protected]>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