Am 20.03.2014 17:32, schrieb Viktor Dukhovni: >> smtpd_tls_key_file = /etc/pki/mail/private/hostkey.pem >> smtpd_tls_mandatory_ciphers = high > > I would leave this at "medium", otherwise you're disabling RC4, > which is the best cipher available on older Windows systems > (Windows XP)
Windows XP is happy with DES-CBC3-SHA which is not that broken as RC4 which with end of 2013 finally falls through any security audit https://www.google.com/search?q=CVE+RC4
