|
|
I just went through the experience of configuring Exchange 2003 to
communicate with my Postfix Mail Gateway using TLS/SSL. The Exchange
implementation of DES-CBC3-SHA1 (3DES-SHA1) is broken. Since the "Use FIPS
compliant" Security features automatically enables 3DES, I was unable to
communicate with my Mail Gateway Securely. I had to disable FIPS, then
configure Postfix to use the medium grade "RC4-MD5" until Microsoft fixes
the problem.
BTW, AES has replaced 3DES as the FIPS compliant encryption algorithm.
My other non-Microsoft mail servers have no issues with high grade
encryption communications.
--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE
|
|