On Sat, Mar 12, 2016 at 10:31:44AM -0800, Alice Wonder wrote:
> I stick with 2.11.x and probably will as long as it is maintained, and I
> build against LibreSSL which is controversial to some, and a devel branch of
> LibreSSL - but it works for me...
Note, I don't test against LibreSSL, and compatibility is not
promised.
OpenSSL 1.1.0 will include native DANE support which may be enabled
in future versions of Postfix in preference to the original Postfix
version.
LibreSSL got a head start on cleaning up the OpenSSL code, which
is easier to do when you have no legacy install-base to worry about,
this is now changing.
I understand that your choice works for you, that's fine. Just
saying that for most Postfix users I'd recommend sticking with
OpenSSL and upgrading each of Postfix and OpenSSL as opportunities
arise.
--
Viktor.
