STARTTLS Everywhere Support

E-F-A / v4

https://efa-project.org

Other

59 stars 41 forks source link

STARTTLS Everywhere Support #113

Open shawniverson opened 6 years ago

shawniverson commented 6 years ago

https://starttls-everywhere.org

JustinHoeky commented 5 years ago

@shawniverson any news on this one? Especially the support for MTA-STS would be great, and can be automated/included in the webserver of the EFA machine if i'm correct

shawniverson commented 5 years ago

@JustinHoeky Noted. I will get this one pushed up in priority.

JustinHoeky commented 4 years ago

@JustinHoeky Noted. I will get this one pushed up in priority.

Great! Could it also be possible to remove TLS 1.0 and TLS1.1, and change the TLS cihpers of TLS1.2? Would be great if this would be possible in EFA-configure If i need to open a new issue/forumpost for this, please let me know.

shawniverson commented 4 years ago

@JustinHoeky No need, got a record here on this issue and it is related, thanks!

JustinHoeky commented 4 years ago

@shawniverson any news on this? The TLS 1.0 and TLS 1.1 are phased out in March. Maybe an integration with the SSL Configuration Generator? (https://ssl-config.mozilla.org/)

It also has a few other points, see https://en.internet.nl/mail/uitvaartverzorgingdenbesten.nl/321661/

Client-initiated renegotiation
Key Exchange parameters
Cipher Order

shawniverson commented 4 years ago

Good stuff. I need to at a STARTTLS option to enable this good stuff.

JustinHoeky commented 4 years ago

Adding this would be great indeed, and follow most of the recent preferred/safest settings (atleast in our country, NL)

Any idea when it will be added? Especially the TLS stuff since it's almost March

Thanks for the great work so far!

JustinHoeky commented 4 years ago

@shawniverson any news on this topic? I've modified some stuff in my config files to reach a higher/securer percentage. https://en.internet.nl/mail/uitvaartverzorgingdenbesten.nl/353985/ Toggling them in EFA would be great and easier.