Gerard E. Seibert:
> I am running Postfix mail_version = 3.5-20190922, with OpenSSL 1.1.1d
> on a FreeBSD 11 machine. I am just wondering what the recommended
> settings are for the following items:
>
> smtp_tls_mandatory_protocols=
> smtpd_tls_mandatory_protocols=
> smtp_tls_protocols=
> smtpd_tls_protocols=
>
> I have seen several recommendations on line, and I just want to make
> sure I am using the proper ones.
Use the defaults, with a recent OpenSSL version. That will kill off
the things that really should not be used anymore.
You may go crazy with local submission service configuration, because
you presumably have some control over your own clients, but you don't
control the rest of the Internet.
Wietse
