Wietse Venema:
> Ed W:
> > On 13/03/2012 23:50, Wietse Venema wrote:
> > > #submission inet n       -       n       -       -       smtpd
> > > #  -o syslog_name=postfix/submission
> > > #  -o smtpd_tls_security_level=encrypt
> > 
> > I forget the exact details now, but one mail client, I think it might be 
> > an Android or iPhone mail client(?) defaults to using the submission 
> > service but without encryption.  The error messages were confusing and 
> > unhelpful to the customer and I just recall it took some time to realise 
> > that it was the enforced tls requirement that was the problem
> > 
> > I see no reason to *require* encryption on the submission port (RFC 
> > aside).  I think "may" is a more appropriate default?
> 
> That's not a problem for me. I don't use the submission service
> and rely on input from the real world for this.

Meaning, "may", combined with a setting that allows plaintext
passwords only over encrypted connections.  Not sure if that makes
trouble shooting easier than when TLS is always required, though.

        Wietse

Reply via email to