Joshua Tauberer 7ca42489ae drop legacy, export-grade, and anonymous ciphers from SMTP (port 25, opportunistic) ...

Even though SMTP (on port 25) is typically opportunistic and a MitM attack can't be prevented, we may as well only offer ciphers that provide some level of security. If a client is so old or misconfigured that it doesn't support newer ciphers, it should hopefully fall back to a non-TLS connection.

Postfix's default was basically anything goes (anonymous and 40-bit ciphers!). Google's MTA's only offer ciphers at 112 bits at greater, and this change approximates that with Postfix's "medium" setting.

Fixes #371

2015-05-05 23:50:07 +00:00

..

bootstrap.sh

Version 0.08

2015-04-01 10:14:34 -04:00

csr_country_codes.tsv

when asking for a CSR country code, give the user a list

2014-08-21 17:28:04 +00:00

dkim.sh

the opendmarc miter should run on incoming mail only

2015-03-21 16:14:01 +00:00

dns.sh

add 'ip-transparent: yes' to nsd.conf

2015-05-04 11:24:40 +00:00

firstuser.sh

move the user-interactive questions and other parts of start.sh into new files

2014-08-25 08:09:37 -04:00

functions.sh

need my new email_validator library during questions

2015-05-03 11:02:23 -04:00

mail-dovecot.sh

mistake in 31eec9fa1c #300

2015-04-11 15:24:15 -04:00

mail-postfix.sh

drop legacy, export-grade, and anonymous ciphers from SMTP (port 25, opportunistic)

2015-05-05 23:50:07 +00:00

mail-users.sh

more work on making the bash scripts readable

2014-10-04 17:57:26 -04:00

management.sh

need my new email_validator library during questions

2015-05-03 11:02:23 -04:00

migrate.py

store IDNs (internationalized domain names) in IDNA (ASCII) in our database, not in Unicode

2015-04-09 14:46:02 +00:00

network-checks.sh

prevent apt from asking the user any questions

2015-02-13 13:41:52 +00:00

owncloud.sh

check that the downloaded ownCloud and roundcube files match a known SHA1 hash

2015-04-11 15:21:38 -04:00

preflight.sh

preflight memory check: units problems

2015-01-11 14:13:35 +00:00

questions.sh

need my new email_validator library during questions

2015-05-03 11:02:23 -04:00

spamassassin.sh

increase spampd maximum message size from 64KB to 500KB, matching the spamc default

2015-04-09 14:46:02 +00:00

ssl.sh

Typo

2015-01-29 17:03:20 +00:00

start.sh

if a migration fails, dont continue setup

2015-04-09 14:46:02 +00:00

system.sh

upgrade to ownCloud 8.0.2

2015-03-28 11:08:57 -04:00

web.sh

implement Mozilla (e.g. Thunderbird) autoconfiguration file

2015-01-31 21:33:18 +00:00

webmail.sh

bump to Roundcube 1.1.1

2015-04-16 11:45:35 +00:00

zpush.sh

upgrade to ownCloud 8.0.2

2015-03-28 11:08:57 -04:00