Re: Is there a best-practices document available?

2016-09-28 Thread Rene 'Renne7; Bartsch, B.Sc. Informatics
Am 28.09.2016 um 17:02 schrieb Wolfe, Robert: > On 09/28/16 09:58 am, Stephen Satchell wrote: >> For PostFix in particular? >> For mail servers in general? >> > > What does a Google search tell you? And for data privacy/security you can have a look into directive BSI-TR03108 for german email pro

Re: WoSign/StartCom CA in the news

2016-09-28 Thread Rene 'Renne7; Bartsch, B.Sc. Informatics
My StartSSL-certs are valid until 4th of october. Luckily I switched to Let's encrypt yesterday - with DANE, of course. ;-) Regards, Renne Am 28.09.2016 um 00:29 schrieb Viktor Dukhovni: > WoSign (who seemingly purchased StartCom) seem to have run into > some compliance issues as reported by

Filtering MX-RRs in Postfix?

2016-09-27 Thread Rene 'Renne7; Bartsch, B.Sc. Informatics
Hi, I have a special application for Postfix: If at least one of the MX resource records of a mail domain contains a .onion-TLD, any non-.onion MX-RRs MUST be ignored to avoid sending the email over the clearnet instead of TOR. Is it possible to configure Postfix for that kind of filtering or i