434 reputation
317
bio website synchromedia.co.uk
location France
age 45
visits member for 4 years, 7 months
seen Dec 22 at 9:37

Skier, Biker, PHP coder, Email wiz, Sysadmin


Dec
19
revised php-mail wiki description
added 88 characters in body
Dec
19
awarded  Tag Editor
Dec
19
revised php-mail wiki excerpt
added 67 characters in body
Dec
19
wiki created php-mail description
Dec
19
wiki created php-mail excerpt
Dec
19
suggested approved edit on php-mail tag wiki
Dec
19
suggested approved edit on php-mail tag wiki excerpt
Dec
19
comment Perfect Forward Secrecy (PFS) for mail servers
I know that, and it's what I'm doing, but I don't want to harden it to the point that popular clients can't connect. Where that point is is currently unknown, hence the question.
Dec
19
comment Perfect Forward Secrecy (PFS) for mail servers
I know it is in servers, but it's generally not in clients, and it's still interesting to know for default server configs since that's what most will be using.
Dec
19
revised Perfect Forward Secrecy (PFS) for mail servers
added 520 characters in body
Dec
19
comment Perfect Forward Secrecy (PFS) for mail servers
That's useful info, but it's sort of the wrong way around. I'm not looking to interrogate a specific server, but to assess support for all these ciphers across many different servers and clients, i.e. find someone that has applied these tests to a large number of different servers.
Dec
19
awarded  Yearling
Dec
19
asked Perfect Forward Secrecy (PFS) for mail servers
Dec
16
comment Multiple SSL vhosts using wildcard certificate in nginx
No you don't. That only applies if you want to serve different domains with SSL on one IP. With a wildcard cert, the vhosts share the same cert, so there's no need for SNI.
Dec
16
awarded  Curious
Dec
15
comment Prevent postfix appending search domain
I tried that - it broke pretty much everything! It does explicitly say not to turn it off!
Dec
15
comment Prevent postfix appending search domain
append_dot_mydomain = no didn't make any difference - it still appends domain to both local and remote addresses. remote_header_rewrite_domain is blank.
Dec
15
comment Prevent postfix appending search domain
Sorry @NickW - I just tested that - it IS appending a domain to bare usernames, even non-existent ones: mail -s test user results in a message being sent to user@example.com.
Dec
15
comment Prevent postfix appending search domain
No, it's appending a search domain to all hostnames that fail a DNS lookup. I don't want it to append a domain at all - bare user names (other than those handled in /etc/aliases) should fail.
Dec
15
comment Prevent postfix appending search domain
I've added the matching postfix log entries. It doesn't appear to log its DNS lookups, only the connection attempts.