SNI via lookup?

Benny Pedersen me at junc.eu
Fri Oct 8 02:47:48 EEST 2021


On 2021-10-08 00:37, Felipe Gasper wrote:
>>> Dovecot call out to some external service to fetch a given domain’s
>>> certificate.
>> 
>> sni is something no one needs, your server name is not changing if you 
>> got a new custommer
> 
> Rest assured, it’s of great use to us.

complexity cost nothing maybe

> I’m just asking if there’s a way to configure it dynamically,
> similarly to how authn can be configured.

sni is not dynamicly secure

https://dovecot.org/pipermail/dovecot/2013-December/094214.html

> Thank you!

no problem on suggest more complexity to users / admins that want it


More information about the dovecot mailing list