Am 16.03.2012 00:02, schrieb Ed W: > On 15/03/2012 13:01, Victoriano Giralt wrote: >> >> DTNX/NGMX Postmaster<postmas...@dtnx.net> wrote: >> >>> I don't know about Android, but we have not seen any issues with the >>> iPhone/iPad. Works fine with TLS 'encrypt' in our setups, as suggested >>> above. >> In my experience, both the manufacturer provided and added mail >> clients I have tryed in Android have had no issues with TLS. >> >> > > I forget the exact issue now, but note that I'm not saying that it > *can't* work. What I'm saying is that I have a bunch of "normal" non > technical users. "Johnny" runs through the wizard on his favourite > device and then costs me money in tech support time if it doesn't work > first time. The issue was something like this device either defaulting > to non TLS (and not coping with the server requiring it), or he couldn't > find the button to enable it? > > I *encourage* TLS on all new installations, and in fact all the Apple > stuff and new Microsoft /Mozilla clients seem to default to TLS > (great). But at the same time I don't see the issue if someone > *chooses* (or the defaults exclude) to avoid TLS and talk plaintext > > Oh, and after the latest firmware update for my Nokia N9 (lovely > phone...) I don't seem to be able to do TLS anymore... Vodafone requires > that you use submission in the UK by blocking port 25, so it's helpful > to be able to use submission without TLS at least until I figure out why > it's not working anymore... > > My point was only not *enforcing* it, rather than it shouldn't be > supported? May, not Required. > > > (A slightly off the wall reason for plaintext is that there are still > users on dialup. In particular my business supports users on a > (2.4Kbit) 300 byte/sec dialup satellite modem which costs $1.50/min. > Enabling TLS costs you $1-3 in additional connect time, plus lack of PPP > compression increases the cost by about a factor of 3. Although we are > clearly not talking about the average user now, I think it would focus > your mind if I asked if you would be happy to increase your monthly > internet bill by a few hundred dollars vs risking going plain text?) > > Cheers > > Ed W > >
Hi Ed , an example in a config should run right out of the box with commented basics if its getting to use. It cant cover all specials in the world unless you dont want to have mass of examples, at last in case of postfix, its the job of the postmaster to cover his local needs, by edit examples, or asking on this list, reading books etc all your described special cases can be matched from general you can use smtp over nearly every port with tls if this makes sense to you and your place, at the end its not the job of postfix trying match all existing firewall setups or client defaults right out of the box cause this must fail ever the examples should only demonstrate basics in what can get configured in a relativ safe -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
