...

postfix: Perfect Forward Secrecy (PFS)

openssl gendh -out /etc/postfix/pfs_512.pem -2 512
openssl gendh -out /etc/postfix/pfs_1024.pem -2 1024

postconf -e "smtpd_tls_dh1024_param_file=/etc/postfix/pfs_1024.pem"
postconf -e "smtpd_tls_dh512_param_file=/etc/postfix/pfs_512.pem"
postconf -e "smtpd_tls_eecdh_grade=strong"
postconf -e "smtp_tls_loglevel=1"
postconf -e "smtpd_tls_loglevel=1"

postconf -e "tls_preempt_cipherlist=yes"

Current articles

Two hosting administrators are discussing a domain outage in front of an unreadable monitor.
Plesk

Plesk Obsidian Update: New Features for Hosting Providers

Plesk Obsidian 18.0.81 and separate extensions introduce new hosting features. Update 2 is the current patch version; for providers, the component version, platform, and controlled rollout are important.

A modern network appliance on a light-colored ESD work surface, symbolizing the testing of web server infrastructure.
Plesk web server

Apache HTTP Server 2.6: What Changes Administrators Can Expect

Apache HTTP Server 2.6 is not yet available as a stable release. This article provides an overview of the development branch and highlights which configurations, modules, log pipelines, and TLS setups teams should already be testing specifically.