Re: Want to Improve SSL/TLS security

2014-05-31 Thread Viktor Dukhovni
On Sat, May 31, 2014 at 10:50:10PM +, Juan Pablo wrote: > I will be going encrypted connections only soon (yes I realize the > consequences) For inbound submission? To a dedicated upstream relay host? With selected peer systems? > so I would like to be able to at the very least disable the >

Re: Want to Improve SSL/TLS security

2014-05-31 Thread Viktor Dukhovni
On Sat, May 31, 2014 at 10:14:58PM +, Juan Pablo wrote: > Afternoon postfix users. I am trying to improve the encrypted connection > to my mail server running postfix 2.7.0-1ubuntu0.2 but doing tests with > https://starttls.info/ I am getting very low scores (E grade) for a number > of reaso

Re: Want to Improve SSL/TLS security

2014-05-31 Thread Juan Pablo
On 2014-05-31 22:34, li...@rhsoft.net wrote: *forget* them, they don't understand E-Mail and are too dumb for realize the difference between http/smtp OK forgetting them. I will be going encrypted connections only soon (yes I realize the consiquences) so I would like to be able to at the very

Re: Want to Improve SSL/TLS security

2014-05-31 Thread li...@rhsoft.net
Am 01.06.2014 00:14, schrieb Juan Pablo: > Afternoon postfix users. I am trying to improve the encrypted connection to > my mail server running postfix > 2.7.0-1ubuntu0.2 but doing tests with https://starttls.info/ I am getting > very low scores (E grade) for a number of > reasons despite maki

Want to Improve SSL/TLS security

2014-05-31 Thread Juan Pablo
Afternoon postfix users. I am trying to improve the encrypted connection to my mail server running postfix 2.7.0-1ubuntu0.2 but doing tests with https://starttls.info/ I am getting very low scores (E grade) for a number of reasons despite making what I though were necessary changes 1) "Ther