On Sun, Apr 16, 2023 at 12:30:14AM +0300, Oleksandr wrote:

> Viktor, How you have analyzed everything perfectly! :-)
> 
> Of course, I cannot influence the camera firmware, it is old and there
> are no new firmware.
> 
> But maybe you can change the Postfix settings so that he makes friends
> with this camera and successfully receives mail from it?

Step 1, deploy a 2048-bit RSA certificate.  If you think that 2048-bit
RSA isn't strong enough for your security needs, you'll be sad to learn
that most of the software deployed on your system is subject to updates
protected by weaker keys, your bank's website uses weaker keys, most of
the "root CAs" in your browser use weaker keys, ...

Step 2.  If necessary, use RSA-SHA1 to create the certificate self-signature.

Step 3.  If necessary, instead get a certificate from a public CA
         trusted by your camera...

Step 4.  Give up and use cleartext.

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to