The selected TLS certificate will be used to identify this system when performing a TLS handshake. By default the system will negotiate TLS encryption with all remote hosts that support it.

You can select the TLS protocol version.We recommend disabling older, less secure protocol versions.

If a particular remote host should always require a TLS encryption, you can add it to the Require TLS negotiation/hosts/nets list. This will cause the system to hold the messages back if TLS encryption for the remote host is not available for some reason. Use this option only for remote hosts that support TLS encryption.

If mails sent from a particular domain should not be accepted without using TLS encryption add these domains to the Require TLS negotiation sender domains list. Then, if the remote host did not negotiate a TLS encryption, the system will reject all mails from these domains.

If a particular remote host should have trouble with TLS encryption, you can add it to the Skip TLS negotiation hosts/nets list. This will cause the system to skip TLS negotiation for these hosts.

	Please enable JavaScript!
	You have forgotten to enable JavaScript in your Browser!