Securing postfix to dovecot (SASL) auth

Peter
Wed, 27 Sep 2017 11:57:48 -0000

On 28/09/17 00:11, Aki Tuomi wrote:
>> ssl=yes is not documented to work for the auth service and it's
highly
>> likely that it is simply ignored.
>
> It is documented for inet_listener's in general and is not ignored. Any
> dovecot inet_listener can be given this flag.
>
> You could use stunnel on the other end.

Does it turn the auth socket into a direct TLS connection, or is there a
STARTTLS implementation for it?


Peter