Hi,

I had two short questions regarding Postfix’s elliptic curve support for the 
SMTP server.

1.  Under the man documentation for: tls_eecdh_strong_curve the documentation 
states “...approximately 128-bit security...”.  Is that saying that it is 
equivalent to 128-bits RSA or it provides an elliptic curve key size of nearly 
128-bits ?

2. To make use of ecliptic curve encryption a TLS certificate must have been 
made with support for ecliptic curves, correct ?  A TLS certificate using RSA 
keys will not work ?

Thanks,

- J

Reply via email to