In article <49nfx174fgzj...@spike.porcupine.org> you write:
>Postfix will send SNI when it is told (by policy) what servername
>to use. It can be statically configured as smtp_tls_servername,
>or dynamically in an smtp_tls_policy_map lookup result with the
>servername attribute.

I meant in the other direction -- you can't tell if someone else's
mail server has more than one name, so the SMTP client should send
SNI.

Looking at the man page it appears that client SNI is tied to DANE
which is not a great idea since the point of MTA-STS is to do server
name verification without needing DNSSEC.

R's,
John

Reply via email to