postfix with TLS

[Matthew Seaman]

On 03/05/2015 16:52, Ernie Luzar wrote:
> pkg info postfix shows the TLS is enabled by default.
> I know what TLS is, but I don't know what this means to postfix.
> 
> Does this mean that postfix has all the internal security library's
> compiled in and
> can function right out of the box as a email server communicating using
> TLS?

Yes.  This gives you the option that, subject to setting various
configuration flags and supplying SSL keys and certs, in any SMTP
dialogue, as a receiver postfix will offer 'STARTTLS' as an available
command, and as a sender it will invoke STARTTLS when the other side
offers it.  So all your e-mail should be encrypted over the wire.  I'm
not entirely sure why this is even considered optional in this day and
age...

	Cheers,

	Matthew


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 971 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20150503/71032dc9/attachment.sig>