Re: Can this SASL configuration be improved

2017-05-26 Thread Viktor Dukhovni
> On May 26, 2017, at 11:29 AM, Fazzina, Angelo > wrote: > > Have you considered limiting weak ciphers ? > > smtpd_tls_exclude_ciphers = That layer of tweak is neither recommended nor needed. What is recommended is: smtpd_tls_ciphers = medium smtp_tls_ciphers = medium thes

RE: Can this SASL configuration be improved

2017-05-26 Thread Fazzina, Angelo
Hi, Have you considered limiting weak ciphers ? smtpd_tls_exclude_ciphers = -ALF -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut, UITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf O