Postfix has supported forward secrecy for TLS since version 2.2 when the TLS patch was adopted into Postfix. Things have changed a lot since then, both in TLS and in the real world.
Viktor wrote up a FORWARD_SECRECY_README that summarizes the Postfix side of things all in one place. Available now: http://www.porcupine.org/postfix-mirror/FORWARD_SECRECY_README.html In the next 24 hours: http://www.postfix.org/FORWARD_SECRECY_README.html Wietse
