Re: [Dovecot] dovecot and PFS

2013-09-21 Thread Timo Sirainen
On 11.9.2013, at 20.10, Frank Behrens wrote: > Hi Emmanuel! > > Am 10.09.2013 09:54, schrieb Emmanuel Dreyfus: >> Hi >> >> Is there known advices on how to favor PFS with dovecot? >> >> In Apache, I use the following directives, with cause all modern >> browsers to adopt 256 bit PFS ciphers, w

Re: [Dovecot] dovecot and PFS

2013-09-11 Thread Frank Behrens
Hi Emmanuel! Am 10.09.2013 09:54, schrieb Emmanuel Dreyfus: > Hi > > Is there known advices on how to favor PFS with dovecot? > > In Apache, I use the following directives, with cause all modern > browsers to adopt 256 bit PFS ciphers, while keeping backward > compatibility with older browsers a

Re: [Dovecot] dovecot and PFS

2013-09-11 Thread Robert Schetterer
Am 11.09.2013 19:10, schrieb Frank Behrens: > Hi Emmanuel! > > Am 10.09.2013 09:54, schrieb Emmanuel Dreyfus: >> Hi >> >> Is there known advices on how to favor PFS with dovecot? >> >> In Apache, I use the following directives, with cause all modern >> browsers to adopt 256 bit PFS ciphers, while

Re: [Dovecot] dovecot and PFS

2013-09-10 Thread Robert Schetterer
Am 10.09.2013 09:54, schrieb Emmanuel Dreyfus: > Hi > > Is there known advices on how to favor PFS with dovecot? > > In Apache, I use the following directives, with cause all modern > browsers to adopt 256 bit PFS ciphers, while keeping backward > compatibility with older browsers and avoiding

[Dovecot] dovecot and PFS

2013-09-10 Thread Emmanuel Dreyfus
Hi Is there known advices on how to favor PFS with dovecot? In Apache, I use the following directives, with cause all modern browsers to adopt 256 bit PFS ciphers, while keeping backward compatibility with older browsers and avoiding BEAST attack: SSLProtocol all -SSLv2 SSLHonorCipherOrder On