While looking through the Postfix default configs about TLS ciphers, I noticed
these
grep -i " anull" main.cf.default
tls_export_cipherlist =
aNULL:-aNULL:HIGH:MEDIUM:LOW:EXPORT:+RC4:@STRENGTH
tls_high_cipherlist = aNULL:-aNULL:HIGH:@STRENGTH
tls_low_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:LOW:+RC4:@STRENGTH
tls_medium_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:+RC4:@STRENGTH
What's the reason for the
aNULL:-aNULL
?
That's not making sense to me. Doesn't that just remove what you just added?
Is it a logging thing?
Jason
