[ 
https://issues.apache.org/jira/browse/JAMES-3215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17135724#comment-17135724
 ] 

Matthieu Baechler commented on JAMES-3215:
------------------------------------------

If I have to define what a mail server should include regarding features, 
encryption (and security and privacy) would be on top of the list. So I would 
rather argue it should be built-in.

Regarding STARTTLS, I agree it's not relevant anymore when you can control the 
other side of the channel. However, as discussed with Eugen, port 25 is 
probably mandatory for communication with servers on the internet.

Finally, regarding letsencrypt support (and maybe remove keystore usage), I 
don't think anybody is actually willing to work on the subject for now.


> Remove SSL support in James
> ---------------------------
>
>                 Key: JAMES-3215
>                 URL: https://issues.apache.org/jira/browse/JAMES-3215
>             Project: James Server
>          Issue Type: Improvement
>            Reporter: David Leangen
>            Assignee: Ioan Eugen Stan
>            Priority: Major
>
> SSL support is not working [1], and it complicates the installation process. 
> It causes the inclusion of various libraries, and Java suuuuuucks for SSL 
> support.
> It would make James a lot simpler to remove SSL support and make SSL 
> termination somebody else's problem. These days it should be easy to use a 
> proxy (like nginx) or an ingress (for example in Kubernetes) to perform SSL 
> termination.
> It would be one less thing to maintain in James, one less thing that can go 
> wrong, one less step to take just to get a James server working, and a step 
> closer to providing good user support.
> {quote}[1] I define "working" by meaning that as a user, I follow the 
> instructions but it still does not work as intended.
> {quote}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to