Re: Avoiding POODLE vulnerability

2023-11-18 Thread Steve Litt
Michael Orlitzky said on Sat, 18 Nov 2023 17:31:49 -0500 >On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: >> >> I forgot to say: I'm using Dovecot 2.3.21 on an up to date 64 bit >> x86_64 Void Linux computer using runit for its init system. I >> populate Dovecot's Maildir via fetchmail and

Re: Avoiding POODLE vulnerability

2023-11-18 Thread Michael Orlitzky
On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: > > I forgot to say: I'm using Dovecot 2.3.21 on an up to date 64 bit > x86_64 Void Linux computer using runit for its init system. I populate > Dovecot's Maildir via fetchmail and procmail. > You probably don't have to do anything. SSLv2 and

Re: Avoiding POODLE vulnerability

2023-11-18 Thread Steve Litt
Steve Litt said on Sat, 18 Nov 2023 16:42:42 -0500 >Hi all, > >Ten years after the fact I learned about POODLE (Padding Oracle On >Downgraded Legacy Encryption) vulnerabilities, which enable a poorly >configured server to force my client to downgrade to vulnerable >encryption. > >My current

Avoiding POODLE vulnerability

2023-11-18 Thread Steve Litt
Hi all, Ten years after the fact I learned about POODLE (Padding Oracle On Downgraded Legacy Encryption) vulnerabilities, which enable a poorly configured server to force my client to downgrade to vulnerable encryption. My current conf.d/10-ssl.conf contains the following line: ssl_cipher_list

Re: [EXT] Replication going away?

2023-11-18 Thread Dean Carpenter
On 2023-07-20 5:31 pm, deano-dove...@areyes.com wrote: On 2023-07-19 4:08 pm, Gerald Galster wrote: A 50-100 mailbox user server will run Dovecot CE just fine. Pro would be overkill. What is