#1100879 RFP: postfix-tlspol -- Lightweight MTA-STS + DANE/TLSA resolver and TLS policy server for Postfix, prioritizing DANE.

Package:
wnpp
Source:
wnpp
Submitter:
nobody
Date:
2025-11-29 16:57:07 UTC
Severity:
normal
#1100879#5
Date:
2025-03-20 00:02:30 UTC
From:
To:
* Package name    : postfix-tlspol
  Version         : 1.8.7
  Upstream Contact: DragonWork
* URL             : https://github.com/Zuplu/postfix-tlspol
* License         : MIT
  Programming Lang: Go
  Description     : Lightweight MTA-STS + DANE/TLSA resolver and TLS policy server for Postfix, prioritizing DANE.

A lightweight and highly performant MTA-STS + DANE/TLSA resolver and TLS policy socketmap server for Postfix that complies to the standards and prioritizes DANE where possible.
Suggested at https://www.postfix.org/TLSRPT_README.html#mta-sts and on the official Postfix mailing list by Wietse among others.

Similar package "postfix-mta-sts-resolver" (https://github.com/Snawoot/postfix-mta-sts-resolver) exists in repo, but breaks RFC 8461 (see vulnerability report CERT-Bund#2023092728001552).
#1100879#10
Date:
2025-04-01 10:14:32 UTC
From:
To:
Hi!

I've stumbled on this same caveat while migrating my mail server to Debian from Fedora.
I would really like to polish my mail server to perfection and be fully compliant.
I'll have a go at packaging this.

I intended to maintain this within the Debian Go Packaging Team. I will require a sponsor from therein.
I've sent an email to pkg-go-maintainers@alioth-lists.debian.net introducing myself and noting my request to join the Debian Go packaging team on Salsa.

Raul