Re: TLS1.3 only

[Wietse Venema]

A. Schulze:
> Hello,
> 
> postfix-3.3.1 + openssl-1.1.1pre8
> 
> For fun I tried to disable all TLS protocol versions other then TLS1.3
> 
> master.cf:
>   submission.local inet n - - - - smtpd
>    -o smtpd_tls_protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1,!TLSv1.2

That setting is ONLY in effect with 'smtpd_tls_security_level = may'.

> but I'm still able to connect using TLS1.2

Insufficient information.

        Wietse