Re: Disable TLS client-initiated renegotiation with postfix

2019-06-08 Thread Viktor Dukhovni
On Sat, Jun 08, 2019 at 11:12:24AM +0200, L. Jankok wrote: > In my main.cf I have"tls_ssl_options=NO_RENEGOTIATION" but when I use the > mailserver verification option from https://internet.nl I get the report > that TLS client-initiated renegotiation is not disabled and that therefore > my postfi

Disable TLS client-initiated renegotiation with postfix

2019-06-08 Thread L. Jankok
In my main.cf I have"tls_ssl_options=NO_RENEGOTIATION" but when I use the mailserver verification option from https://internet.nl I get the report that TLS client-initiated renegotiation is not disabled and that therefore my postfix setup is prone to a DOS attack by means of CPU resource starvation