On 08-26-2022 10:08 am, Paul Kingsnorth wrote: MTA-STS seems to be getting more widespread. I wondered how many people are using the postfix-mta-sts-resolver from Snawoot, and whether there are any standout good/bad features of it? Or whether there are any other ways of implementing MTA-STS with postfix?
Wouldn't setting smtpd_tls_security_level=encrypt have the same desired effect of what MTA-STS is trying to solve? Granted you would be preventing other MTA's from delivering if they aren't using STARTTLS. Or is there more going on with MTA-STS then what I understand?