home.social

#tlsencryption — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #tlsencryption, aggregated by home.social.

fetched live
  1. MTA-STS enforce vs. testing: know before you switch

    RFC 8461 defines two modes: testing and enforce

    in testing mode, failures are reported via TLS-RPT but mail still delivers

    in enforce mode, the sending server must abort if TLS negotiation fails

    I always recommend at least 30 days in testing mode with TLS-RPT active before switching

    the reports show you exactly who will break

    no guessing required

    dmarcguard.io/tools/mta-sts-ch

    #DMARC #EmailSecurity #MTASTS #TLSEncryption

  2. MTA-STS enforce vs. testing: know before you switch

    RFC 8461 defines two modes: testing and enforce

    in testing mode, failures are reported via TLS-RPT but mail still delivers

    in enforce mode, the sending server must abort if TLS negotiation fails

    I always recommend at least 30 days in testing mode with TLS-RPT active before switching

    the reports show you exactly who will break

    no guessing required

    dmarcguard.io/tools/mta-sts-ch

    #DMARC #EmailSecurity #MTASTS #TLSEncryption