Viktor Dukhovni:
>   * smtpd_tls_ask_ccert_helo_names = 
>       <domain match list> (overrides smtpd_tls_ask_ccert = no)

And one more main.cf parameter for client TLSA records. That would
make three.

>   * smtpd_tls_ask_ccert =
>       no | yes |
>           match_client_{address,name,helo_name} type:name,
>           ...

What would this user interface look like with client TLSA
records?

        Wietse

Reply via email to