> -----Original Message----- > From: Wietse Venema via Postfix-users <[email protected]> > Sent: Wednesday, February 28, 2024 3:11 PM > To: Postfix users <[email protected]> > Subject: [pfx] Re: Configuration Settings for TLS 1.2 and 1.3 with No Weak > Ciphers > > Scott Hollenbeck via Postfix-users: > > Right, but that page says "You are strongly encouraged not to change this > > setting". I'm also unsure why I'm not seeing any TLS 1.3 ciphers when > > "smtpd_tls_protocols = >=TLSv1.2". Doesn't that setting include TLS 1.3? > > tls_high_cipherlist and tls_medium_cipherlist primarily list the > ciphers that Postfix should NOT use.
It turns out that the scanner I'm using (nmap --script ssl-enum-ciphers) doesn't support TLS 1.3. Postfix may well be configured properly. Scott _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
