Re: best TLS crypto settings?

2021-09-24 Thread Bill Cole
On 2021-09-24 at 19:05:00 UTC-0400 (Fri, 24 Sep 2021 19:05:00 -0400) Alex is rumored to have said: Hi, I recently ran testssl.sh (https://github.com/drwetter/testssl.sh) on my mail server, Presumably on port 25 with STARTTLS? and it's still showing TLS 1 and 1.1 still being offered, as

Re: best TLS crypto settings?

2021-09-24 Thread Viktor Dukhovni
On Fri, Sep 24, 2021 at 07:05:00PM -0400, Alex wrote: > I recently ran testssl.sh (https://github.com/drwetter/testssl.sh) on > my mail server, and it's still showing TLS 1 and 1.1 still being > offered, as well as DES: You should generally ignore most issues misreported by SSL/TLS testing sites

best TLS crypto settings?

2021-09-24 Thread Alex
Hi, I recently ran testssl.sh (https://github.com/drwetter/testssl.sh) on my mail server, and it's still showing TLS 1 and 1.1 still being offered, as well as DES: Testing protocols via sockets SSLv2 not offered (OK) SSLv3 not offered (OK) TLS 1 offered (deprecated) TLS 1.1