On Thu, Oct 24, 2024 at 16:24:04 +1100, Viktor Dukhovni via Postfix-users wrote:
> Yes, of course, as documented.  TLS is off by default, this is backwards-
> compatible behaviour, and Postfix aims to not "surprise" operators with
> unexpected new behaviour after an upgrade.


This could be enabled with a compatibility_level condition?


> Now perhaps at this point, we could (if Wietse concurs) change the
> default security level to "may" when (almost always nowdays) TLS is
> enabled at compile time.  Gmail stats for TLS in/out are quite close
> lately to 100% in both directions:


Yes it would be good to switch to (unconditional) "may" by now.  I wonder
how much of that Google reported cleartext e-mail comes from Postfix...


        Geert


_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to