Please, don't suggest rotten ssl verions

flashmob / go-guerrilla

Mini SMTP server written in golang

MIT License

2.79k stars 366 forks source link

Please, don't suggest rotten ssl verions #9

Closed athoune closed 8 years ago

athoune commented 8 years ago

        ssl_protocols  SSLv2 SSLv3 TLSv1;

SSLv2 doesn't exist anymore, and sslv3 is rotten.

flashmob commented 8 years ago

Thanks for pointing it out. The server was written in 2011 where majority of ssl connections were using ssllv3 and still a lot of sslv2. So back then, you either allow these, or scratch your head as to why your email is not arriving. Anyhow, a pull request would be welcome...