mouss qpeqrnetoyennet david b funk wrote jo didnt read chriss statement closely conscientious mail server administrator configure server accept encrypted connections smtpauth transactions server enforce encryption requirements religious war declaration ok let see say p consciensomething admin knows always case encryption security depends implementation code environment random number generation specification example consciensomething admin knows thing like httpwwwhenlichdemozsmtp consciensomething knows linking large library like openssl otherwise quite safe mta adds opportunities system compromise consciensomthing admin prefers open relay zombie consciensomthing admin knows possible protect logins without tls data protection needed pgp smime provide endtoend something server thing provide sure clients support secure authentication methods goes starttls dont tell obsolete smtps conscienseomthing admins dont implement obsolete things consciensomething admin knows unless client certificates used starttls doesnt help dictionary attacks performed botnets cant block one ip admin knows deploying client certificates andor assisting users come free unless work givernment organization financed public taxes even conscien admin wont spend peoples money frivoulously consciensomething admin knows private key somewhere system protecting come free course consciensomething admin setup ipsecssh tunnel care starttls still feel consciencious maybe maybe still enforce starttls come tls nice thus matter client wants server let client continue smtpauth transaction completed starttls operation case smtps already encrypted back skips question possibly easiest way solve problem would run two smtp servers one port 25 full spamav scanning regular mail traffic one ports 587 645 smtpauthtls users clients submit messages one av scanning possibly limited spam scanning fully agreed wed 06 aug 2008 094038 0200 advice mta blacklist