On Tue, 14 Apr 2020, Ivo wrote:
Maybe this thread can help you with your first question : https://dovecot.org/pipermail/dovecot/2014-August/097488.html
I was more or less going to say the same thing. Further to this, it's more important to make sure your clients enforce SSL/STARTTLS use by disabling auto-discovery, and if you're ultra-conservative, certificate pinning. Joseph Tam <jtam.h...@gmail.com>
