Patrick Horgan wrote:
From nmap:
995/tcp open ssl/pop3 Dovecot pop3d
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP
SASL(PLAIN LOGIN)
pop3 allows SSLv2, imap doesn't. In my dovecot.conf I have:
ssl_cipher_list = ALL:!LOW:!SSLv2
at the global level. Do I need to put it inside the protocol pop3{}
section?
Just a bump, still have the problem, why would dovecot support sslv2 for
pop, but not for imap, when it's configured to not support sslv2 at all?
Patrick
