On Fri, Nov 08, 2013 at 01:17:54AM +0000, Viktor Dukhovni wrote: > With smtpd(8) there are no implicit exclusions so you can build the > full list yourself if you want. For example with opportunistic TLS > (may):
One minor correction, with either of:
smtpd_tls_ask_ccert = yes
smtpd_tls_req_ccert = yes
the Postfix SMTP server automatically excludes aNULL ciphers
(otherwise the client can't present its own cert).
--
Viktor.
