-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Victor Duchovni wrote: > On Tue, Oct 28, 2008 at 09:34:11AM +0900, Byung-Hee HWANG wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Noel Jones wrote: >>> This should have all the information you need: >>> http://www.postfix.org/TLS_README.html >>> >>> If you have specific questions after reading the above, please see: >>> http://www.postfix.org/DEBUG_README.html#mail >>> >> Ah Noel, thank you quick reply. After Google, a few hours ago i found >> out what i need really: >> <URL:http://koti.kapsi.fi/ptk/postfix/postfix-tls-cacert.shtml>. > > This recommends making your private key group readable by the "postfix" > group. This advice is neither necessary, nor a good idea. Private keys > should belong to "root" and be readable (mode 0600) only by root. Postfix > loads private keys before dropping privs. > I read Victor's advice very seriously. I stop to do that. Instead, i'll spend my spear time to study about DKIM with dkimproxy and dkim-milter. That's my best passion at email study. Thanks, Victor and Noel ;;
byunghee -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iEYEARECAAYFAkkHmsEACgkQsCouaZaxlv757QCgtYfH6iZVxPspbpi4gEUhFP9R y2cAnA11oYvEimLlinMzbuolkI3Rv35i =rq9/ -----END PGP SIGNATURE-----