> On Mar 22, 2018, at 1:22 PM, Wietse Venema <wie...@porcupine.org> wrote: > > Well, each Postfix SMTP client creates SSL_CTX once, then reuses > it across multiple TLS sessions. I suppose that tlsproxy can share > this object among all sessions that tlsproxy creates for SMTP clients > with similar parameters. This is the stuff that gets serialized and > passed around between SMTP client, tlsproxy, and that appears in > scache lookup keys).
Yes, that's what I had in mind. > This may be non-trivial but it's not rocket science. Yes, just a bunch of attention to detail. -- Viktor.