On Tue, Oct 21, 2008 at 05:23:10PM -0400, Terry Carmen wrote: > I just setup TLS and SASL to allow sending non-local mail only by > authenticated users, and to have the entire SMTP conversation with the > client software encrypted, and wanted to make sure it's operating correctly: > > > The log from a session from my mail client (Thunderbird) says: > > Oct 21 17:15:02 wormhole postfix/smtpd[23828]: Anonymous TLS connection > established from rrcs-xx-xx-89-178.nys.biz.rr.com[xx.xx.89.178]: TLSv1 > with cipher DH
It is interesting to see an MUA negotiate an anonymous session. Clearly T-Bird did not care to ask for or verify the server certificate. Did it require special configuration to enable this, or is this default T-Bird behaviour? When I added support for anonymous TLS ciphers in Postfix, I expected these to mostly get used in MTA-to-MTA opportunistic TLS sessions. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:[EMAIL PROTECTED]> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.