Skip to content

0.1.0

Choose a tag to compare

View all tags
@Kernel-Error Kernel-Error released this 13 Nov 13:52
· 17 commits to main since this release
v0.1.0
59da6f8

First release.

  • Socketmap service for Postfix smtp_tls_policy_maps: dane-only for next-hop domains with DNSSEC validated MX and TLSA records, NOTFOUND otherwise, TEMP on DNS failures (Postfix defers instead of downgrading).
  • Meant to run in front of an MTA-STS resolver with smtp_tls_security_level = verify: DANE if published, else MTA-STS, else a verified certificate, never plaintext.
  • FreeBSD rc.d script, man page and a port skeleton under freebsd/mail/py-postfix-dane-policy.

Tested in production on FreeBSD 15.1 / Postfix 3.11.7 / Unbound.

Assets 2
Loading