from postconf(5) for smtpd_tls_security_level=encrypt: > Mandatory TLS encryption: announce STARTTLS support to SMTP > clients, and require that clients use TLS encryption. According to > RFC 2487 this MUST NOT be applied in case of a publicly-referenced > SMTP server. Instead, this option should be used only on dedicated > servers.
Most of this is very clear, but the term "dedicated servers" in the last sentence is very confusing, in fact I'm left wondering what having a dedicated server has to to with TLS at all. Can you clarify this last sentence and possibly find a better term for the documentation? Peter