smtp_tls_security_level for mandatory TLS and optonal DANE

[Charlotte 🦝 Delenk]

Hi,






Is there a way to combine "encrypt" with "dane"?

Thank you in advance,
--
Charlotte

https://keybase.io/darkkirb • GPG Key 3CEF5DDA915AECB0 • https://darkkirb.de

I was trying to harden my postfix configuration and was looking into making TLS mandatory, as well as verifying the TLS Certificate using DANE wherever possible. According to the documentation of smtp_tls_security_level, you can either set the value to "encrypt" for mandatory tls or "dane" for optional DANE, but not both.

OpenPGP_0x3CEF5DDA915AECB0.asc
Description: OpenPGP public key

OpenPGP_signature
Description: OpenPGP digital signature