Re: Always "Untrusted TLS" for own Postfix instances

2014-02-23 Thread Viktor Dukhovni
On Sun, Feb 23, 2014 at 12:38:26PM -0500, Wietse Venema wrote: > Applied to Postfix 2.8 and onwards. Thanks. Returning to the OP's question, disabling anonymous cipher-suites will no substantially help to (after the fact) detect MITM attacks. All the attacker has to do is present some other cer

Re: Always "Untrusted TLS" for own Postfix instances

2014-02-23 Thread Wietse Venema
Dirk St?cker: > Hello, > > I'm lost and don't find any solution anymore, so I now need to ask. If in doubt, turn off chroot. Some Linux distributions mistakenly turn it on and make Postfix unnecessarily difficult to use. Wietse http://www.postfix.org/DEBUG_README.html#no_chroot TRY TUR