DTNX Postmaster:
There are several problems with your configuration. Please refer to the
mailinglist archive for how to configure Postfix to deal with Logjam.
It has been discussed extensively in this thread;
http://marc.info/?t=143239334800001&r=1&w=2
I read this as "how do I provide strong Crypto at my Server"
But I'm more concernd about "how to notice if my SMTP Client connect
to a broken Server I don't control".
So I set up a weak server as described. And, no suprise, there is no
warning from the postfix smtp client connecting to that server.
As users expect their browser deny to connect to https://dh512.zmap.io
I would love to see postfix smtp client reject connections to my weak Server.
And *that* is the point...