diff options
| author | maxigas <maxigas@anargeek.net> | 2013-04-11 19:05:12 +0200 |
|---|---|---|
| committer | maxigas <maxigas@anargeek.net> | 2013-04-11 19:05:12 +0200 |
| commit | 001e6689ec413259a5e50ba25af7b994a95b8046 (patch) | |
| tree | ae430e6b2f9d64ec66a82ab4726f2e7f3375cf53 | |
| parent | 5ffa2c8fdfdccc7821898eba5a7d42990796b977 (diff) | |
| download | policy-001e6689ec413259a5e50ba25af7b994a95b8046.tar.gz policy-001e6689ec413259a5e50ba25af7b994a95b8046.tar.bz2 | |
small change
| -rw-r--r-- | best_practices.mdwn | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/best_practices.mdwn b/best_practices.mdwn index 6afd701..d098aee 100644 --- a/best_practices.mdwn +++ b/best_practices.mdwn @@ -101,8 +101,7 @@ http://linux.die.net/man/5/crypttab -> section "swap" ## Mail * [IPs in headers](http://riseuplabs.org/privacy/postfix/) the user's home IP address should not appear in any email headers. *level 2* - * if it does appear, users must be informed about this *level 1* perhaps use server IP instead of localhost for [riseup hack](http://riseuplabs.org/privacy/postfix/) - +* if it does appear, users must be informed about this *level 1* perhaps use server IP instead of localhost for [riseup hack](http://riseuplabs.org/privacy/postfix/) * The connection between the server and the user is always encrypted. *level 2* * optional unencrypted communication between user and server are visibly marked as insecure *level 1* * [StartTLS-postfix](http://metatron.sh/kmw/Transformers/PostfixCacertVerifyHowto) or [StartTLS-exim](http://aland.burngreave.net/archives/2009/12/30/index.html#e2009-12-30T16_26_49.txt) starttls with other compliant servers’, certs verified against cacert/... *level 1* |