Securing postfix to dovecot (SASL) auth

[Aki Tuomi]

On 27.09.2017 14:57, Peter wrote:
> On 28/09/17 00:11, Aki Tuomi wrote:
>>> ssl=yes is not documented to work for the auth service and it's highly
>>> likely that it is simply ignored.
>> It is documented for inet_listener's in general and is not ignored. Any
>> dovecot inet_listener can be given this flag.
>>
>> You could use stunnel on the other end.
> Does it turn the auth socket into a direct TLS connection, or is there a
> STARTTLS implementation for it?
>
>
> Peter

It will listen for direct TLS.

Aki