stdevPavelmc / mailad

Software to provision a mail server with users from a Windows or Samba 4 Active Directory
GNU General Public License v3.0
33 stars 11 forks source link

[BUG] Disable TLS1 & TLSv1.1 #110

Closed stdevPavelmc closed 4 years ago

stdevPavelmc commented 4 years ago

Describe the bug

A user noted (tks @Koratsuki) that we are still allowing TLS v1 & 1.1 and is a major trend to not support it as both are insecure.

More references here

A two months data from a online server shown that less than 3% of the connections are using TLSv1 and none are using TLSv1.1 so the impact must be from low to very low...

This in Postfix & Dovecot

stdevPavelmc commented 4 years ago

closed by #111