Project

General

Profile

Statistics
| Branch: | Revision:

duckcorp-infra / ansible / roles / dc-postfix / templates / includes @ 9ab70ad9

Name Size Revision Age Author Comment
tls.conf 1.02 KB 9ab70ad9 3 months Marc Dequènes dc-postfix: rework TLS security * enforce serv...

Latest revisions

# Date Author Comment
9ab70ad9 2018-12-29 07:59 Marc Dequènes

dc-postfix: rework TLS security

  • enforce server cipher order
  • be more restrictive with mandatory secured connections
  • smtpd?_tls_session_cache_database is not needed anymore, RFC 5077 TLS
    session tickets is recommended instead
  • share TLS settings among server types

View revisions

Also available in: Atom