Any update on lazy load SNI?

[Joel A. Chornik]

What we do is have openresty(nginx) sit as a reverse proxy on top of dovecot, and use lua to dynamically load certificates using sni.

We have a large userbase (100k+) and works without issues, except that it does not work with STARTTLS, only IMAP+TLS. Has not been an issue, as we setup users using autodiscover/autoconfig or as a fallback it is the default config in most user agents.

Hope it helps
Joel Chornik

> 
> On 3 Nov 2022, at 10:24, Pierre Allétru <pierre.alletru at gmail.com> wrote:
> 
> Pierre Allétru