Re: Are sha1 & TLSv1 fully deprecated wrt mail, and time to block them?

[pg151]

On Sat, Oct 13, 2018, at 10:41 AM, Viktor Dukhovni wrote:
> As yet, I see no compelling reason to disable TLS 1.0 in SMTP. 

Noted.

> What you can and should now disable is SSLv2 and SSLv3, which Postfix
> now disables by default.

Already done.

Ironically, FinCo's online 'security/privacy' missive crows about their 
commitment to ensuring "Email Security", their commitment to protecting their 
websites with "SSL3", and that users should look for "SSL Secured (128 Bit)." 
in their cert info.

Sigh. Whatchagonnado?