Viktor Dukhovni: > * smtpd_tls_ask_ccert_helo_names = > <domain match list> (overrides smtpd_tls_ask_ccert = no)
And one more main.cf parameter for client TLSA records. That would make three. > * smtpd_tls_ask_ccert = > no | yes | > match_client_{address,name,helo_name} type:name, > ... What would this user interface look like with client TLSA records? Wietse