Author: Jan Ingvoldstad Date: To: exim users Subject: Re: [exim] SNI and DANE TLSA record monitoring
On Wed, Oct 19, 2016 at 3:00 PM, Felipe Gasper <felipe@???>
wrote:
I've taken the discussion of the fine details of web configuration off-list.
> > Exim's approach is currently a bit too monolithic to be usable for mass
> > hosting of many domains with separate certificates, separate
> > configurations, and separate logfiles.
>
> Exim’s approach is BEAUTIFUL for the purpose of separate certificates per
> domain.
If separate certificates per domain is where your needs end, sure.
> I’d be fine with some facility to configure by-domain configs, logs, or
> what not in tandem with the certificate. Just as long as it’s still simple
> and easy to determine the certificate by the DOMAIN, not by served content.
>
> Well, SMTP doesn't "serve content" per se, so I don't really get that
objection.
What I think, is that which certificate gets served, should be fully
configurable based on the information available at the time you need to
serve the certificate. That's not a lot of information. :)
