Email Authentication
Mail server old TLS versions check
Whether your mail server still accepts TLS 1.0 or 1.1, which were retired in 2021.
Check this on your own domain now. It is free with a DomainGuard account and works on any domain. The check reads only what your domain publishes, and gives you a report you can send to whoever runs your website.
What we look at
After the normal STARTTLS session we open one more and offer only TLS 1.0 and 1.1. A server that accepts is flagged as low risk.
Why it matters to your business
TLS 1.0 and 1.1 have known weaknesses, and leaving them on lets an attacker in the middle push a connection down to them. Every current mail server can use TLS 1.2 or 1.3, so nothing you need depends on them.
How to fix it
- Set the server's minimum TLS version to 1.2 (Postfix: smtpd_tls_protocols = >=TLSv1.2).
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.