[pfx] Re: Current TLS cipher/protocol recommendations for postfix?

Dnia 31.03.2026 o godz. 14:23:12 Dan Mahoney via Postfix-users pisze:
> I also think this is all theater right now, as in the absence of MTA/STS,
> postfix could refuse to talk <tls1.2 and the result would be "mail being
> delivered in the clear". (We have not yet moved to requiring TLS via
> MTA-STS).
> 
> So my question: Are the defaults (>=TLSv1) still sane?  Or is it "worth"
> turning this up to >=TLSv1.2?

It's just a stupid company applying some stupid checklist (probably meant
for HTTPS) to something they don't understand. As usual with all those
"rating", "assessing" or "scoring" companies - they usually don't understand
what they're talking about, regardless of the matter, and the companies that
understand even less trust them blindly, nobody knows why.
-- 
Regards,
   Jaroslaw Rafa
   [email protected]
--
"In a million years, when kids go to school, they're gonna know: once there
was a Hushpuppy, and she lived with her daddy in the Bathtub."
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]