search

radiasoft / rsconf

host config
Apache License 2.0
0 stars 1 forks source link

Fix #488 remove smtp_tls_eecdh_grade = ultra #489

Closed robnagler closed 6 months ago

schellj commented 6 months ago

This looks correct given the info here and the config disabling TLS < 1.2: https://www.postfix.org/FORWARD_SECRECY_README.html

With TLS 1.2 the server needs to leave its setting of "smtpd_tls_eecdh_grade" at the default value of "auto" (earlier choices of an explicit single curve grade are deprecated). With TLS 1.3, the "smtpd_tls_eecdh_grade" parameter is not used, and curve selection is unconditionally negotiated.

@robnagler Since you assigned this to me, were you looking for me to do something further?

robnagler commented 6 months ago

@schellj just looking for your review/approval since you had worked on this code recently.