Re: openssl3+postfix issue (ca md too weak)

[Jörg Sonnenberger <joerg%bec.de@localhost>]

On Tuesday, November 14, 2023 3:39:53 AM CET Taylor R Campbell wrote:
> Unless anything has changed in the past couple years, I don't think
> there is any widespread deployment of SMTP TLS server authentication
> that means anything for general MTAs -- at best, TLS in SMTP serves as
> opportunistic encryption to defend against passive eavesdroppers.

MTA-STS, the equivalent to HTTP's HSTS, is support for all outgoing mail by at 
least Google Mail and Outlook, which covers a significant chunk of all mails.

Joerg