Jeff Pang via Postfix-users skrev den 2024-06-25 08:44:
how to deploy the following email security features?
google it :)
RFC 7672 SMTP-DANE
smtp_dns_support_level = dnssec
smtp_tls_security_level = dane
thats all if you already have tls setup in smtp_
test with posttls-finger your-domain-here
it should show verified
you need local dns server with dnssec enabled aswell, or atleast a
resolver like unbound or pdns-resolver
RFC 8461 MTA-STS
postfix does not support it
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org