Re: Enforced inbound TLS ciphers

Viktor Dukhovni writes: >> On Dec 6, 2017, at 1:41 PM, micah wrote: >> main.cf smtpd_tls_security_level = may >> >> Is there a reason why 'smtpd_tls_security_level = may' is not default in >> postfix? What needs to be done to make it default? It seems harmless to >> have that enabled

Re: Enforced inbound TLS ciphers

> On Dec 6, 2017, at 1:41 PM, micah wrote: > >>> main.cf >>> smtpd_tls_security_level = may > > Is there a reason why 'smtpd_tls_security_level = may' is not default in > postfix? What needs to be done to make it default? It seems harmless to > have that enabled by default, with no negative ef

Re: Enforced inbound TLS ciphers

Viktor Dukhovni writes: >> On Dec 6, 2017, at 10:21 AM, li...@mbchandler.net wrote: >> >> main.cf >> smtpd_tls_security_level = may Is there a reason why 'smtpd_tls_security_level = may' is not default in postfix? What needs to be done to make it default? It seems harmless to have that enabled

Re: Enforced inbound TLS ciphers

> On Dec 6, 2017, at 10:21 AM, li...@mbchandler.net wrote: > > main.cf > smtpd_tls_security_level = may > > smtpd_sender_restrictions = > check_client_access cidr:/etc/postfix/enforced_inbound_tls.cidr > > enforced_inbound_tls.cidr > 10.0.0.0/8 reject_plaintext_session > > My questi

Enforced inbound TLS ciphers

I'm enforcing inbound TLS from my internal network with these settings: main.cf smtpd_tls_security_level = may smtpd_sender_restrictions = check_client_access cidr:/etc/postfix/enforced_inbound_tls.cidr enforced_inbound_tls.cidr 10.0.0.0/8 reject_plaintext_session My question is,