Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
low priority of mail proxying it is unknown when > this is going to happen. Oh, so other people already proposed that, I think I saw some proprietary products that might be based on NGINX that actually implemented this. Denis 06.07.2020, 11:52, "Maxim Dounin" : > Hello! > > On

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
Yeah, It's 2020 after all :) I think most modern mail client do support SNI and send server name in client hello. So, Chris, you're saying that you successfully run Postfix and Dovecot that rely on SNI in production? How bit is your user base, roughly? Thanks 06.07.2020, 11:21, "Chris Adams"

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
so, I think passtrhru AUTH IMAP and POP works out of the box now. It's only SMTP that NGINX never even tries to AUTH against backed. I wonder why this decision was taken? 06.07.2020, 11:27, "Chris Adams" : > Once upon a time, Denis Sh. said: >>   Also, I wasn't ab

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
7;t support passing thru the AUTH to the backend for SMTP, same as with IMAP/POP? Yeah, I know that SNI for mail protocols is a "grey" area, still want to start implementing it. Denis > > 06.07.2020, 10:32, "Maxim Dounin" : >> Hello! >> >> On Mon, Jul 0

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
with IMAP/POP? Yeah, I know that SNI for mail protocols is a "grey" area, still want to start implementing it. Denis  06.07.2020, 10:32, "Maxim Dounin" :> Hello!>> On Mon, Jul 06, 2020 at 10:17:31AM -0700, Denis Sh. wrote:>>>  So, when proxying SMTP/IMAP, is it

SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
Hi! So, when proxying SMTP/IMAP, is it possible to get the Server Name that mail clients send as a part of Client Hello? Similar to Embedded Variables for ngx_http_ssl_module: $ssl_server_name returns the server name requested through SNI (1.7.0); I don't see these vars defined here https://gi

SNI support in `mail` context

2020-07-06 Thread Denis Sh .
Hi! So, when proxying SMTP/IMAP, is it possible to get the Server Name that mail clients send as a part of Client Hello? Similar to Embedded Variables for ngx_http_ssl_module:$ssl_server_namereturns the server name requested through SNI (1.7.0); Or should I use `stream` to proxy mail? What about ST