Joshua Tauberer 7ca42489ae drop legacy, export-grade, and anonymous ciphers from SMTP (port 25, opportunistic) ... Even though SMTP (on port 25) is typically opportunistic and a MitM attack can't be prevented, we may as well only offer ciphers that provide some level of security. If a client is so old or misconfigured that it doesn't support newer ciphers, it should hopefully fall back to a non-TLS connection. Postfix's default was basically anything goes (anonymous and 40-bit ciphers!). Google's MTA's only offer ciphers at 112 bits at greater, and this change approximates that with Postfix's "medium" setting. Fixes #371		2015-05-05 23:50:07 +00:00
..
bootstrap.sh	Version 0.08	2015-04-01 10:14:34 -04:00
csr_country_codes.tsv	when asking for a CSR country code, give the user a list	2014-08-21 17:28:04 +00:00
dkim.sh	the opendmarc miter should run on incoming mail only	2015-03-21 16:14:01 +00:00
dns.sh	add 'ip-transparent: yes' to nsd.conf	2015-05-04 11:24:40 +00:00
firstuser.sh	move the user-interactive questions and other parts of start.sh into new files	2014-08-25 08:09:37 -04:00
functions.sh	need my new email_validator library during questions	2015-05-03 11:02:23 -04:00
mail-dovecot.sh	mistake in 31eec9fa1c #300	2015-04-11 15:24:15 -04:00
mail-postfix.sh	drop legacy, export-grade, and anonymous ciphers from SMTP (port 25, opportunistic)	2015-05-05 23:50:07 +00:00
mail-users.sh	more work on making the bash scripts readable	2014-10-04 17:57:26 -04:00
management.sh	need my new email_validator library during questions	2015-05-03 11:02:23 -04:00
migrate.py	store IDNs (internationalized domain names) in IDNA (ASCII) in our database, not in Unicode	2015-04-09 14:46:02 +00:00
network-checks.sh	prevent apt from asking the user any questions	2015-02-13 13:41:52 +00:00
owncloud.sh	check that the downloaded ownCloud and roundcube files match a known SHA1 hash	2015-04-11 15:21:38 -04:00
preflight.sh	preflight memory check: units problems	2015-01-11 14:13:35 +00:00
questions.sh	need my new email_validator library during questions	2015-05-03 11:02:23 -04:00
spamassassin.sh	increase spampd maximum message size from 64KB to 500KB, matching the spamc default	2015-04-09 14:46:02 +00:00
ssl.sh	Typo	2015-01-29 17:03:20 +00:00
start.sh	if a migration fails, dont continue setup	2015-04-09 14:46:02 +00:00
system.sh	upgrade to ownCloud 8.0.2	2015-03-28 11:08:57 -04:00
web.sh	implement Mozilla (e.g. Thunderbird) autoconfiguration file	2015-01-31 21:33:18 +00:00
webmail.sh	bump to Roundcube 1.1.1	2015-04-16 11:45:35 +00:00
zpush.sh	upgrade to ownCloud 8.0.2	2015-03-28 11:08:57 -04:00