فهرست منبع

[Postfix] Security: Prefer server-side ciphers

Prefer server-side ciphers to prevent client-side cipher downgrade. Already enabled in Dovecot.
Patrik Kernstock 6 سال پیش
والد
کامیت
1dc9d3fa27
1فایلهای تغییر یافته به همراه1 افزوده شده و 0 حذف شده
  1. 1 0
      data/conf/postfix/main.cf

+ 1 - 0
data/conf/postfix/main.cf

@@ -99,6 +99,7 @@ lmtp_tls_protocols = !SSLv2, !SSLv2, !SSLv3
 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
 smtpd_tls_protocols = !SSLv2, !SSLv3
 smtpd_tls_security_level = may
+tls_preempt_cipherlist = yes
 tls_ssl_options = NO_COMPRESSION
 smtpd_tls_mandatory_ciphers = high
 virtual_alias_maps = proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_alias_maps.cf,