On 2025/11/22 12:38, Viktor Dukhovni via Postfix-users wrote: > There are many DANE-enabled MX hosts with just a self-signed EE certificate. > Here's an example:
My server presents 2 self-signed certs now, and finally an LE cert. The last one is because of your comment in a previous email that some misguided mail servers might use cleartext if they don't like self-signed certificates. > Not sure what you mean by "first certificate", and which one you find > interesting. The one from Let's Encrypt or the self-signed one with > ML-DSA-65? The ML-SDA-65 one. I figured that your server prefers its own ciphers, and the one I was presented with was the mldsa65; hence my conclusion that that one is the first in your chain. -- Edmund Lodewijks <[email protected]> TZ: UCT+2 / GMT+2 _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
