linagora / tmail-backend

GNU Affero General Public License v3.0
41 stars 22 forks source link

[TN-DGD] [TWP] Per domain SSL certificates #1293

Open chibenwa opened 6 days ago

chibenwa commented 6 days ago

Description

Find a way to support per domain ssl certificate

Most likely through SNI (Server Name Indication)

What would it take to implement it?

chibenwa commented 6 days ago

On a MDA we do not need STARTTLS thus SSL only we can delegate SSL termination to HAProxy which supports SNI