J. Thomsen: > On Mon, 19 Nov 2018 19:03:05 -0500,Viktor Dukhovni > <postfix-us...@dukhovni.org> wrote: > > >That's not terribly specific, what specifically in those logs do > >you find compelling and why? > > >From the log it should be obvious > > 1) does Postfix lookup the TLSA record > 2) did Postfix receive the TLSA record and which ones > 3) does Postfix use the TLSA record and which one > 4) is the TLSA record valid and how is Postfix using it > > >I think that 5 log messages where one was looks reasonably sufficient > >to me are probably too much. > > Well, yes, it was just a suggestion for an easy copy-paste from > posttls-finger to the smtp client :)
Increased logging would hurt tlsproxy performance. tlsproxy is required to reuse SMTP-over-TLS connections, which is needed to avoid connection throttling by receivers. Wietse