On Tue, Oct 21, 2008 at 05:23:10PM -0400, Terry Carmen wrote:

> I just setup TLS and SASL to allow sending non-local mail only by 
> authenticated users, and to have the entire SMTP conversation with the 
> client software encrypted, and wanted to make sure it's operating correctly:
> 
> 
> The log from a session from my mail client  (Thunderbird) says:
> 
> Oct 21 17:15:02 wormhole postfix/smtpd[23828]: Anonymous TLS connection 
> established from rrcs-xx-xx-89-178.nys.biz.rr.com[xx.xx.89.178]: TLSv1 
> with cipher DH

It is interesting to see an MUA negotiate an anonymous session. Clearly
T-Bird did not care to ask for or verify the server certificate. Did
it require special configuration to enable this, or is this default
T-Bird behaviour?

When I added support for anonymous TLS ciphers in Postfix, I expected
these to mostly get used in MTA-to-MTA opportunistic TLS sessions.

-- 
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[EMAIL PROTECTED]>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

Reply via email to