> -----Original Message----- > From: Wietse Venema via Postfix-users <postfix-users@postfix.org> > Sent: Wednesday, February 28, 2024 3:11 PM > To: Postfix users <postfix-users@postfix.org> > Subject: [pfx] Re: Configuration Settings for TLS 1.2 and 1.3 with No Weak > Ciphers > > Scott Hollenbeck via Postfix-users: > > Right, but that page says "You are strongly encouraged not to change this > > setting". I'm also unsure why I'm not seeing any TLS 1.3 ciphers when > > "smtpd_tls_protocols = >=TLSv1.2". Doesn't that setting include TLS 1.3? > > tls_high_cipherlist and tls_medium_cipherlist primarily list the > ciphers that Postfix should NOT use.
It turns out that the scanner I'm using (nmap --script ssl-enum-ciphers) doesn't support TLS 1.3. Postfix may well be configured properly. Scott _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
