mirror/kumomta
1
0
Fork 0
mirror of https://github.com/mailscope/kumomta.git synced 2026-09-08 03:28:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Traffic Shaping Refactor First Pass

Browse Source
This commit is contained in:
Mike Hillyer
2026-06-09 13:23:56 -04:00
parent 4eedf9361e
commit 164f109326
18 changed files with 544 additions and 515 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/userguide/installation/security.md
+1 -1
View File
@@ -116,7 +116,7 @@ There are three main ways in which you can manage that risk:
ensure that the TLS is set to required even if your default policy is
opportunistic.
* For well-known sites with working TLS, such as Google, override the
opportunistic TLS with required TLS in your [shaping configuration](../configuration/trafficshaping.md).
opportunistic TLS with required TLS in your [shaping configuration](../trafficshaping/shapingfiles.md).
* Consider enabling [DANE](../../reference/kumo/make_egress_path/enable_dane.md), which is
similar in effect to MTA-STS, using signed DNS records instead of publishing
its policy via HTTPS. It requires working and trusted DNSSEC