On Tue, Jul 10, 2018 at 09:21:04AM +0100, Stephen Farrell wrote:
> I didn't have time before the I-D cutoff but have since
> added a section on mail to the repo pre-01 version. (See
> [1] section 3.2.) I'd love to add more detail like that
> and/or more sections for other protocols if folks have
> data to offer with references.
The numbers for MX hosts with working DANE TLSA records are:
4337 TLS 1.2
63 TLS 1.0
5 TLS 1.1
These are early adopters of enhanced SMTP security, so one would
expect to find modern software and an emphasis on security, and
yet, for >1% of the MX hosts, their SMTP server libraries fail to
negotiate TLS 1.2. Presumably, the broader MTA population has a
higher incidence of TLS 1.0-only servers.
--
Viktor.
_______________________________________________
TLS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tls
