The tag has no usage guidance.

learn more… | top users | synonyms

17
votes
4answers
21k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
5
votes
1answer
105 views

Postfix “Trusted TLS connection established” but “Server certificate not verified”

I´m using a Postfix TLS Policy to enforce TLS for outgoing email. Unfortunately in some cases the certificate verification fails and I don´t know why. For instance, this is an excerpt of my TLS ...
5
votes
2answers
4k views

ejabberd starttls_required in c2s/s2s and disable SSLv3 + unsecure Ciphers

I'm using ejabberd on Ubuntu. My configuration looks like this: {5269, ejabberd_s2s_in, [ {shaper, s2s_shaper}, {max_stanza_size, 131072}, ...
2
votes
2answers
591 views

How do I log tls-encrypted smtp traffic?

I'd like to know what my local postfix says to the Amazon SES smtpd after the STARTTLS. In plain text, so I can understand it. Amazon SES requires TLS, so I can't temporarily turn it off. I currently ...
0
votes
3answers
2k views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
5
votes
1answer
1k views

postfix TLS configuration for incoming gmx-mail

I set up my mailserver with postfix 2.7.1 and dovecot 1.2.15 and everything seemed to work just fine, but now I found out that people using @gmx.net addresses cannot send emails to me and rather ...
0
votes
1answer
150 views

starttls fails after IP address change

I have changed the IP address of our exim mail server (the virtual machine has been copied to a different host, also the network configuration is using NAT). Now it no longer accepts STARTTLS ...