Feature addition: TLSRPT
Andrew C Aitchison via Exim-users <[email protected]> Wed, 15 Jul 2026 10:49:38 +0100 (BST)
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
In line with the new contributions policy, would there be interest in
adding support for TLSRPT https://www.rfc-editor.org/rfc/rfc8460 ?
RFC8460 describes a reporting mechanism and format by which sending
systems can share statistics and specific information about potential
failures with TLS connections to recipient domains. Recipient domains
can then use this information to both detect potential attacks and
diagnose unintentional misconfigurations.
I would be using the library
https://github.com/sys4/libtlsrpt/
which connects to a service provided by
https://github.com/sys4/tls-reporter/
Postfix has used these to provide TLSRPT for over a year, though this is
not currently enabled in Ubuntu - I don't know about other distros.
Ideally a small amount of MTA-STS would be used but I am not sure that
that would have to be within exim rather than the tls-reporter
service.
--
Andrew C. Aitchison Kendal, UK
[email protected]
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki