{"action":"opened","issue":{"url":"https://api.github.com/repos/whiteout-io/mail-html5/issues/386","labels_url":"https://api.github.com/repos/whiteout-io/mail-html5/issues/386/labels{/name}","comments_url":"https://api.github.com/repos/whiteout-io/mail-html5/issues/386/comments","events_url":"https://api.github.com/repos/whiteout-io/mail-html5/issues/386/events","html_url":"https://github.com/whiteout-io/mail-html5/issues/386","id":91890696,"number":386,"title":"PFS cipher support?","user":{"login":"moparisthebest","id":363760,"avatar_url":"https://avatars.githubusercontent.com/u/363760?v=3","gravatar_id":"","url":"https://api.github.com/users/moparisthebest","html_url":"https://github.com/moparisthebest","followers_url":"https://api.github.com/users/moparisthebest/followers","following_url":"https://api.github.com/users/moparisthebest/following{/other_user}","gists_url":"https://api.github.com/users/moparisthebest/gists{/gist_id}","starred_url":"https://api.github.com/users/moparisthebest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moparisthebest/subscriptions","organizations_url":"https://api.github.com/users/moparisthebest/orgs","repos_url":"https://api.github.com/users/moparisthebest/repos","events_url":"https://api.github.com/users/moparisthebest/events{/privacy}","received_events_url":"https://api.github.com/users/moparisthebest/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-29T19:40:35Z","updated_at":"2015-06-29T19:40:35Z","closed_at":null,"body":"I run my own mail server, and for both IMAP and SMTP support I have only these ciphers allowed:\r\n\r\nECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA\r\n\r\nwhiteout cannot connect to either service because they don't have any ciphers in common, if I drop down the ciphers to something like:\r\n\r\nHIGH:+TLSv1:!SSLv2\r\n\r\nThen it can connect, and postfix says it's connecting with:\r\nTLSv1.1 with cipher AES256-SHA (256/256 bits)\r\nwhile my other clients connect with:\r\nTLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)\r\n\r\nIs this a configuration issue that can be fixed with whiteout? Or is it a limitation of forge?"}}