Do i need any secure channel, if i'm using postfix to receive email only?

2009-12-01 Thread Arora, Sumit
Hi folks,

I'm using postfix for just receiving emails from network, do I need to enable 
TLS or anything else for building up a secure channel.
I guess all this is required in case of my email clients connecting to my email 
server.

Thanks  Regards,
Sumit Arora
IPG RD Hub, Gurgaon
Hewlett-Packard India Software Operation Pvt. Ltd.

Work: x19013
Cell:  +91-9958181104



Re: Do i need any secure channel, if i'm using postfix to receive email only?

2009-12-01 Thread Eero Volotinen

Quoting Arora, Sumit sumit.ar...@hp.com:


Hi folks,

I'm using postfix for just receiving emails from network, do I need   
to enable TLS or anything else for building up a secure channel.
I guess all this is required in case of my email clients connecting   
to my email server.


Yes, enable TLS and only allow encrypted smtp traffic or use pgp (or  
both for paranoid security)


--
Eero



Re: Do i need any secure channel, if i'm using postfix to receive email only?

2009-12-01 Thread Victor Duchovni
On Tue, Dec 01, 2009 at 12:37:47PM +, Arora, Sumit wrote:

 I'm using postfix for just receiving emails from network, do I need
 to enable TLS or anything else for building up a secure channel.
 I guess all this is required in case of my email clients connecting
 to my email server.

Your question is far too vague to answer. You need to pose it in
the context of one or more explicit use-cases, described with enough
specificity so that the risk model is clear.

There is no such thing as secure, there is only mitigates a list of
threats considered in the design. What threats do you want to mitigate
and in what cases?

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
mailto:majord...@postfix.org?body=unsubscribe%20postfix-users

If my response solves your problem, the best way to thank me is to not
send an it worked, thanks follow-up. If you must respond, please put
It worked, thanks in the Subject so I can delete these quickly.