Am 15.10.2014 um 19:18 schrieb Luigi Rosa:
Mike Cardwell wrote on 15/10/2014 19:08:
I'd be interested to hear figures regarding how much traffic would change
from being encrypted to plain text if SSLv3 was dropped for SMTP...
My humble opinion about the delta: zero.
I prefer to disable SSLv3 to prevent a future 0-day that could affect STARTTLS
and IMAPS (I disabled SSL v2 and v3 on Dovecot ad well)
lucky guy - i have some Outlook 2003 users
under WinXP (for which i have a test VM) disable SSL3 in dovecot leads
on no longer connect to IMAPS/POP3S from that ***** client - anybody
expierience if Outlook 2003 at least unter Win7 speaks TLS1.0 out of the
box?