Hi Carl, I have no ssl_protocols, but I do have ssl_min_protocol Eric On Wed, Sep 4, 2019 at 11:20 AM CarlC Internet Services Service Desk < [email protected]> wrote:
> For Dovecot, I use > > > > ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 !SSLv2 > > > > Then under ssl_cipher_list, I have a long list of ciphers [and blocked > ones] that start with the strongest and work downward from there. When I > run a scan against IMAPS, any that are found to be compromised, I change > the list to match. This is why I don’t list mine as its fluid based on the > latest scans. > > > > $0.02, > > Carl > >
