STARTTLS Everywhere Support

[shawniverson]

https://starttls-everywhere.org

[JustinHoeky]

@shawniverson any news on this one?
Especially the support for MTA-STS would be great, and can be automated/included in the webserver of the EFA machine if i'm correct

[shawniverson]

@JustinHoeky Noted. I will get this one pushed up in priority.

[JustinHoeky]

@JustinHoeky Noted. I will get this one pushed up in priority.

Great!
Could it also be possible to remove TLS 1.0 and TLS1.1, and change the TLS cihpers of TLS1.2?
Would be great if this would be possible in EFA-configure
If i need to open a new issue/forumpost for this, please let me know.

[shawniverson]

@JustinHoeky No need, got a record here on this issue and it is related, thanks!

[JustinHoeky]

@shawniverson any news on this?
The TLS 1.0 and TLS 1.1 are phased out in March.
Maybe an integration with the SSL Configuration Generator? (https://ssl-config.mozilla.org/)

It also has a few other points, see https://en.internet.nl/mail/uitvaartverzorgingdenbesten.nl/321661/

• Client-initiated renegotiation
• Key Exchange parameters
• Cipher Order

[shawniverson]

Good stuff. I need to at a STARTTLS option to enable this good stuff.

[JustinHoeky]

Adding this would be great indeed, and follow most of the recent preferred/safest settings (atleast in our country, NL) Any idea when it will be added? Especially the TLS stuff since it's almost March Thanks for the great work so far!

[JustinHoeky]

@shawniverson any news on this topic?
I've modified some stuff in my config files to reach a higher/securer percentage.
https://en.internet.nl/mail/uitvaartverzorgingdenbesten.nl/353985/
Toggling them in EFA would be great and easier.