[exim] DNSSEC+DANE vs MTA-STS was GnuTLS vs OpenSSL

2021-09-30 Thread Sabahattin Gucukoglu via Exim-users
On 30 Sep 2021, at 23:55, Viktor Dukhovni via Exim-users wrote: > The primary use-case for MTA-STS at present is gmail.com, otherwise > it is basically unused. I am not a fan of propping up Google's walled > garden, so generally discourage its adoption. Below is a response to > the USG's call

Re: [exim] GnuTLS vs OpenSSL

2021-09-30 Thread Viktor Dukhovni via Exim-users
> On 30 Sep 2021, at 6:32 pm, Sabahattin Gucukoglu via Exim-users > wrote: > > Courier Mail Server fetches MTA-STS policy documents. I’d consider this a > good reason to do MTA-STS as well as DANE, even though I suspect the base of > Courier users will be small. Interesting too is that Debian

Re: [exim] GnuTLS vs OpenSSL

2021-09-30 Thread Sabahattin Gucukoglu via Exim-users
Looks like I will be spending some more quality time with GnuTLS docs as I do seem to have been giving it a hard time. Most interesting so far is the discovery that the ciphersuite selection lets you specify not just the suites, but also the negotiated protocol version. It’s not as convenient,

[exim] Please drop TLSA records matching retired Let's Encrypt CAs

2021-09-30 Thread Viktor Dukhovni via Exim-users
The DANE survey continues to observe a "long tail" of MX hosts with TLSA records that match the retired "X3" and/or "X4" Let's Encrypt issuer Cas. If you're publishing TLSA records with Let's Encrypt issuer CA hashes, the "X3" and "X4" CAs should no longer appear in your TLSA RRset. Also be

Re: [exim] Exim 4.95 released

2021-09-30 Thread Jeremy Harris via Exim-users
On 30/09/2021 15:43, Sabahattin Gucukoglu via Exim-users wrote: On 28 Sep 2021, at 22:19, Heiko Schlittermann via Exim-users wrote: - Removed: - support for MacOS This makes me sad. Was there any particular reason? Nobody was maintaining the sole resgression-testing system, and

Re: [exim] Exim 4.95 released

2021-09-30 Thread Sabahattin Gucukoglu via Exim-users
On 28 Sep 2021, at 22:19, Heiko Schlittermann via Exim-users wrote: > - Removed: > - support for MacOS This makes me sad. Was there any particular reason? I appreciate that it’s not a server platform but being able to compile Exim from a tree in your home prefix and use it as a very