mixandClaude Opus 5.5 c09368c544 design: help says the upstream's TLS checks no certificate ...

Security audit 2026-10-17, finding M7 (stage 6): the upstream TLS mode
"Required" is Postfix's encrypt level, which verifies no certificate, so
it protects against a passive observer only. Help's Upstream topic says
so for both modes. check.py: 0 violations.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 22:33:34 +03:00

..

src

design: help says the upstream's TLS checks no certificate

2026-10-17 22:33:34 +03:00

account.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

audit.js

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

backup.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

build.py

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

check.py

design: in-log, Why is a sheet over the page; no Deny on a Postfix reject

2026-10-12 00:12:04 +03:00

components.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

confirm-email-signin.html

design: dmarc-day - the reporter's day named as such; confirm's sign-in state

2026-10-17 13:15:27 +03:00

confirm-email.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

dmarc-domain.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

dmarc-report.html

design: dmarc-day - the reporter's day named as such; confirm's sign-in state

2026-10-17 13:15:27 +03:00

dmarc.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

health.html

design: health-sockets - the inbound journal's socket on Health

2026-10-17 13:21:59 +03:00

help.html

design: help says the upstream's TLS checks no certificate

2026-10-17 22:33:34 +03:00

in-domain-delete.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-domain.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-domains.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-filter-lists.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-log.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-quarantine-message.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-quarantine.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

in-queue.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

login-no-admin.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

login-reset-sent.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

login-reset-set.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

login-reset.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

login.html

design: password-reset - a confirmed e-mail, then a link to reset

2026-10-17 11:02:07 +03:00

out-app-created.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-app.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-domain-delete.html

design: domain delete names the DMARC reports that go with it

2026-10-17 21:49:12 +03:00

out-domain-settings.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-domain.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-domains.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-log.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-message.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

out-queue.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

outlines.json

design: local-time - times without UTC, the zone on Settings

2026-10-17 00:59:49 +03:00

overview.html

design: health-sockets - the inbound journal's socket on Health

2026-10-17 13:21:59 +03:00

perf-edge.svg

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

preflight.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

settings.html

design: dmarc-day - the reporter's day named as such; confirm's sign-in state

2026-10-17 13:15:27 +03:00

setup.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

system-log.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00

theme.css

design: label-tag - a tag beside a label is no taller than its line

2026-10-17 13:49:00 +03:00

user-delete.html

design: user-reauth - your account password on the user form and user delete

2026-10-17 21:20:49 +03:00

user.html

design: user-reauth - your account password on the user form and user delete

2026-10-17 21:20:49 +03:00

users.html

design: panel-words - the mockups and the panel say the same

2026-10-17 02:10:29 +03:00