On Sun, Nov 13, 2016 at 08:42:19AM +0100, Juri Haberland wrote:
> > They're just lines in a configure file. Save the old file and you back
> > to where you were.
>
> Just go with the tips from BetterCrypto.org - as the site above suggests, too.
Better yet, stick with the Postfix defaults, they were chosen with
care to be appropriate for MTA to MTA SMTP. Avoid the vast majority
of howto guides, they are often inapplicable or poorly informed or
both.
Sites like BetterCrypto.org are focused on other problem spaces.
Opportunistic TLS for SMTP is very different from mandatory TLS
for HTTPS.
https://tools.ietf.org/html/rfc7435
https://tools.ietf.org/html/rfc7672#section-1.3
--
Viktor.
