Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 3857 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Feature request] Enable support for DNSSEC and DANE in the packaged version of Postfix in PureMessage for UNIX

Pegasus

(PureMessage is not listed at https://www.sophos.com/en-us/support/feature-requests.aspx so I'm putting this here.)

To allow better inter-system security, please enable support for DNSSEC and DANE in the provided version of Postfix in PureMesage for UNIX. Specifically, I want to specify the following configuration options in /opt/pmx6/postfix/etc/main.cf and not have them fail:

smtp_tls_security_level=dane

smtp_dns_support_level=dnssec

(DANE) TLS authentication is available with Postfix 2.11 and later, so it appears that these options just need to be enabled at compile time.

See http://www.postfix.org/TLS_README.html#client_tls_dane for details.



This thread was automatically locked due to age.
Unfiltered HTML