I have setup my personal self hosted mail server. I use Postfix, Dovecot and rspamd. My question is about cipher suites, this topic is more discussion that specific answer seeking. I have setup all My services connections to use SSL whit AES 128bit cipher suites and TLS 1.2> protocol. For WEB, SSH I have no issues as clients that connect will use up to date browsers, program clients to get resources they need. Problem is mail. Far as I know a lot of mail servers still have old software and they might not support TLS 1.2 whit AES 128bit cipher suites and that could lead to lost mail. I have setup Posfix to use AES128+EECDH, AES128+EDH suites for now. I have tested mail delivery and receiving from major mail providers like Gmail, Outlook, Yahoo and bunch of local services and some private servers that I have access to - so far do good. I can send and receive mail just fine.
What experience do You have whit this? Am I going over board whit this or those cipher suites are fine?