Please enable TLS on the GMP mailserver

John Scott jscott at posteo.net
Sat Apr 15 06:56:58 CEST 2023


Hi,

The GMP mailserver is the only mailserver I come across that still doesn't have TLS enabled. Although confidential information is not exchanged with the mailing lists, it is increasingly common for mail providers to enforce a TLS-only policy, as the exceptionally few mailservers that don't support it are outweighed by the ramifications of TLS downgrade attacks.

Thus, even if it isn't strictly necessary for the GMP mailservers to use TLS, this is the exception rather than the norm and it would create a lot less friction if it were enabled. Let's Encrypt certificates are free of charge.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part
URL: <https://gmplib.org/list-archives/gmp-discuss/attachments/20230415/08da7a8a/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5880 bytes
Desc: not available
URL: <https://gmplib.org/list-archives/gmp-discuss/attachments/20230415/08da7a8a/attachment-0001.bin>


More information about the gmp-discuss mailing list