new postfix config

2026-07-21 11:37:40 +02:00 · 2026-07-15 13:46:17 +02:00
parent 540ef153d1
commit 805039777c
2 changed files with 44 additions and 42 deletions
@@ -9,7 +9,7 @@ For all webservers, we observe the following common mistakes:
 * HTTPS redirect: our test demands an upgrade to HTTPS **first**, before redirecting. This means that when you want your website to be accessible over domain example.nl, we expect http://example.nl to redirect to https://example.nl, while http://www.example.nl should redirect first to https://www.example.nl, then to https://example.nl. The reason for this, is that HSTS will only work when the Strict-Transport-Security header is served over HTTPS. By redirecting directly, the initial domain is not protected by HSTS.
 * SHA-1 as hash function for key exchange: this is a legacy hash function that is explicitly deprecated since 2021 by [RFC 9155](https://datatracker.ietf.org/doc/html/rfc9155) and insufficient according to the latest TLS guidelines. Note that this is a different setting than the accepted ciphers. Not all firmware (especially GUI firmware) allows you easily change this configuration.

-## nginx example configuration
+## nginx
 The most actual example configuration can be found within the source code of Internet.nl itself. 

 ### Assumptions