Option to disable client-initiated renegotiation

Serg me at at.encryp.ch
Mon Mar 13 13:24:58 UTC 2023


Hello, is there any way to disallow client-initiated renegotiation at 
the dovecot? I haven't found any mention of this feature within source 
code as well as at the documentation.

I am asking about it because without this feature mail server is 
vulnerable to a TLS renegotiation DoS attack which can consume a lot of 
CPU and is harder to combat comparing to a basic TLS connections flood.


More information about the dovecot mailing list