Dňa 11. augusta 2024 23:46:43 UTC používateľ Viktor Dukhovni via mailop 
<mailop@mailop.org> napísal:

>I see some similar traffic (remote disconnects after ~8-30s) on my server:

Please, what would be reasonable TLS handshake timeout nowadays?

I know, it depends, but anyway i consider 5 min (IMO stanfard SMTP timeout)
as too long. I lowered it on my MSA to 1 min long time ago, without any
problems for real clients. But i feel, that even 1 min is still too long for 
TLS,
especially when it is first thing, which client have to do after TCP 
establishing.

When i look to GnuTLS, they "suggests" to set it to some constant with
very long name (GNUTLS_something), which is set to max_int ms, thus
even longer....

I found that i cannot set TLS handshake timeout in exim, but anyway,
knowing that value can be useful, as other SW can allow to setup it.
Can you please elaborate about it?

regards


-- 
Slavko
https://www.slavino.sk/
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to