VS: Re: Implementation of TLS OCSP Stapling

2016-03-06 Thread Aki Tuomi
Luckily ocsp stapling is an SSL extension and clients not supporting it won't be asking for it either. ---Aki TuomiDovecot oy Alkuperäinen viesti Lähettäjä: Andrew McGlashan Päivämäärä: 6.3.2016 10.36 (GMT+02:00) Saaja: dovecot@dovecot.org Aihe: Re: Implementation o

Re: Implementation of TLS OCSP Stapling

2016-03-06 Thread Andrew McGlashan
On 3/03/2016 11:58 PM, aki.tu...@dovecot.fi wrote: > We will take this feature under consideration and see if it can be implemented > in future release. Thank you for your suggestion! As much as I hate Outlook (Look Out!), there are loads of people using really old versions; 2003 is no longer sup

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Osiris
On 03-03-16 14:23, Gedalya wrote: > On 03/03/2016 08:17 AM, dove...@flut.demon.nl wrote: >> On 03-03-16 14:09, Gedalya wrote: >>> On 03/03/2016 07:30 AM, Stephan Bosch wrote: BTW, I can imagine that Thunderbird can already do that, as it shares much of the Firefox code base. >>> Thunderb

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Gedalya
On 03/03/2016 08:17 AM, dove...@flut.demon.nl wrote: > On 03-03-16 14:09, Gedalya wrote: >> On 03/03/2016 07:30 AM, Stephan Bosch wrote: >>> BTW, I can imagine that Thunderbird can already do that, as it shares much >>> of the Firefox code base. >> Thunderbird definitely does validate certificates

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 14:09, Gedalya wrote: > On 03/03/2016 07:30 AM, Stephan Bosch wrote: >> BTW, I can imagine that Thunderbird can already do that, as it shares much >> of the Firefox code base. > Thunderbird definitely does validate certificates via OCSP, enabled by > default and I've run into that the

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Gedalya
On 03/03/2016 07:30 AM, Stephan Bosch wrote: > BTW, I can imagine that Thunderbird can already do that, as it shares much of > the Firefox code base. Thunderbird definitely does validate certificates via OCSP, enabled by default and I've run into that the hard way a couple of times wrt StartSSL h

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 13:58, aki.tu...@dovecot.fi wrote: >> On March 3, 2016 at 2:15 PM dove...@flut.demon.nl wrote: >> >> >> On 03-03-16 13:04, A. Schulze wrote: >>> dovecot: >>> So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" cert

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread aki . tuomi
> On March 3, 2016 at 2:15 PM dove...@flut.demon.nl wrote: > > > On 03-03-16 13:04, A. Schulze wrote: > > > > dovecot: > > > >> So I would like to know if Dovecot is planning to feature OCSP stapling. > >> That way I know for sure my "must staple" certificates can be used by > >> Dovecot. And in

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
On 03-03-16 13:04, A. Schulze wrote: > > dovecot: > >> So I would like to know if Dovecot is planning to feature OCSP stapling. >> That way I know for sure my "must staple" certificates can be used by >> Dovecot. And in my opinion, every TLS offering daemon should be up to >> par to the capabilitie

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Stephan Bosch
Op 3-3-2016 om 13:04 schreef A. Schulze: dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TL

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread Stephan Bosch
Op 3-3-2016 om 13:04 schreef A. Schulze: dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TL

Re: Implementation of TLS OCSP Stapling

2016-03-03 Thread A. Schulze
dovecot: So I would like to know if Dovecot is planning to feature OCSP stapling. That way I know for sure my "must staple" certificates can be used by Dovecot. And in my opinion, every TLS offering daemon should be up to par to the capabilities of TLS.. Not lag behind :) What's your opinion o

Implementation of TLS OCSP Stapling

2016-03-03 Thread dovecot
Hi all, About a year ago, Torsten already asked for OCSP stapling (http://dovecot.org/pipermail/dovecot/2015-April/100632.html). Unfortunately, there was no answer to his question. Now RFC 7633 ("TLS Feature Extension", https://tools.ietf.org/html/rfc7633, a.k.a. "Must Staple") has landed, revoc