Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: add self-signed example #43

Closed
wants to merge 1 commit into from
Closed

docs: add self-signed example #43

wants to merge 1 commit into from

Conversation

bt90
Copy link

@bt90 bt90 commented Dec 21, 2022

Borrowed the openssl command from https://aiosmtpd.readthedocs.io/en/latest/smtp.html#enabling-starttls and added an explanation on how to properly mount it in the container.

@YoRyan
Copy link
Owner

YoRyan commented Dec 22, 2022

I've opted to add links to the page instead with 562e093. This isn't a setup I'd really want to encourage; self-signed TLS is not much better than plaintext, because of the lack of a certificate authority.

@YoRyan YoRyan closed this Dec 22, 2022
@bt90
Copy link
Author

bt90 commented Dec 22, 2022

While I agree it's not perfect, it's far better than a plaintext connection. Apart from MITM attacks, the credentials are secure at least during transmission.

@YoRyan
Copy link
Owner

YoRyan commented Dec 22, 2022

That's fair. Still, once you have your certificate file, it should be fairly obvious how to provide it to the container with bind-mounts. I don't even think it's necessary to set the ownership to 999:999; I doubt aiosmtpd does any permissions checking like the web servers do.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants