<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 31 October 2018 at 09:41 "Michael A. Peters" <
<a href="mailto:mpeters@domblogger.net">mpeters@domblogger.net</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
On 05/01/2018 09:08 AM, Aki Tuomi wrote:
</div>
<div>
>
</div>
<div>
>> On 01 May 2018 at 19:03 Felipe Gasper <
<a href="mailto:felipe@felipegasper.com">felipe@felipegasper.com</a>
</div>
<div>
>> <mailto:
<a href="mailto:felipe@felipegasper.com">felipe@felipegasper.com</a>>> wrote:
</div>
<div>
>>
</div>
<div>
>>
</div>
<div>
>> Hi,
</div>
<div>
>>
</div>
<div>
>> For CAs that do not include a signed certificate timestamp in their
</div>
<div>
>> newly-issued certificates, does Dovecot support either OCSP stapling
</div>
<div>
>> or the Certificate Transparency TLS extension?
</div>
<div>
>>
</div>
<div>
>> If the TLS extension is supported, how does the admin configure the
</div>
<div>
>> timestamp for each certificate?
</div>
<div>
>>
</div>
<div>
>> I’m wondering if any MUAs will follow Google’s lead and insist on CT.
</div>
<div>
>>
</div>
<div>
>> Thank you!
</div>
<div>
>>
</div>
<div>
>> -Felipe Gasper
</div>
<div>
>> Mississauga, Ontario
</div>
<div>
>
</div>
<blockquote type="cite">
<div>
Hi!
</div>
</blockquote>
<blockquote type="cite">
<div>
We are planning to add ocsp stapling support. At least Thunderbird
</div>
<div>
supports must-staple attribute.
</div>
<div>
---
</div>
<div>
Aki Tuomi
</div>
</blockquote>
<div>
Hi, is there any more news on this?
</div>
<div>
<br>
</div>
<div>
Note I don't *personally* need it, but I provide custom dovecot RPMs for
</div>
<div>
CentOS 7 and someone asked how to do it. They want to use a certificate
</div>
<div>
that has the "must staple" feature.
</div>
<div>
<br>
</div>
<div>
(I'm personally more interested in DANE support in clients, which
</div>
<div>
dovecot doesn't need to do anything for, that's client specific)
</div>
</blockquote>
<div>
It has not veen forgotten, just has not been done yet. We are bundling it together with other changes related to certificate handling.
</div>
<div>
<br>
</div>
<div>
I cannot provide any schedule for it yet.
</div>
<div>
<br>
</div>
<div class="io-ox-signature">
---
<br>Aki Tuomi
</div>
</body>
</html>