Following on from their success with Let's Encrypt (and certbot) the Electronic Frontier Foundation have launched an initiative to get all mail server using STARTTLS - if you don't know what it is nor why it's important then I'd suggest you read their FAQ.
Go to the EFF website, read what this is about and check your server: https://starttls-everywhere.org/
If you don't currently have any valid certificates on your server (i.e. you're still using the self-signed certificates from Zimbra) then I'd suggest you also read the great thread and instructions from Jim Dunphy in this thread: viewtopic.php?f=15&t=60781 - make sure you follow that thread and implement valid certificates on your server.
STARTTLS everywhere
- ccelis5215
- Outstanding Member
- Posts: 614
- Joined: Sat Sep 13, 2014 2:04 am
- Location: Caracas - Venezuela
- ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12
Re: STARTTLS everywhere
Hi Bill,
Thanks for the information.
Another excelent EFF inititative.
ccelis
Thanks for the information.
Another excelent EFF inititative.
ccelis
Re: STARTTLS everywhere
Hi
You're welcome.
Hopefully it will gain some traction in these forums.
You're welcome.

Hopefully it will gain some traction in these forums.
Re: STARTTLS everywhere
Yay, it's all green!
Just need to list my domain
Just need to list my domain

Re: STARTTLS everywhere
Many Thanks to your post
-
- Advanced member
- Posts: 100
- Joined: Sat Jul 19, 2014 7:07 am
- ZCS/ZD Version: Release 8.6.0.GA.1153.UBUNTU14.64 U
Re: STARTTLS everywhere
It would help if Zimbra included setup of that in the admin UI.
Re: STARTTLS everywhere
Too bad this forum doesn't have a "like" button. 

Re: STARTTLS everywhere
Has anyone set up MTA-STS yet? It does seem like a bit of a chew!
Who is online
Users browsing this forum: H.c.K and 14 guests