Score:0

postfix MTA and SSL

al flag

We have some services sending information to email receivers. The services use SMTP to send the mail to postfix and then postfix delivers it to the correct domains (gmail.com, hotmail.com etc).

When the mail arrive in an gmail inbox its marked with this icon enter image description here

Im trying to understand how the encryption for email works. If we add an certificate to postfix, will it create an end to end encryption, so if our service send an email to @gmail.com - what will happen?

  1. The message will be encrypted from our service and all the way to gmail.com
  2. Or will the email be encrypted between our service and postfix, decrypted (on postfix) and then encrypted between postfix and gmail if gmail.com offer it?

If its option 2, what would be the benefit in this case to use TLS between the services and postfix?

Since its only our internal services sending email, there is no passwords etc sent i clear text between our services and postfix.

Can a wild card web site certificate be used for postfix (same domain name as the postfix configuration)

anx avatar
fr flag
anx
There should be a file called [TLS_README](http://www.postfix.org/TLS_README.html) in the documentation of your mail server. Feel free to ask about *specific* problems in implementing those recommendations - however this site does not accept requests for learning material recommendations.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.