Comment by 😺 gemalaya

Re: "I wonder how misfin messages are replyable, the client does..."

In: s/misfin

@alexlehm You're right, apart from the SAN there's no way to tell, that's what the main implementation uses to determine the sender's address. But IMO it's good enough, if the SAN is invalid ,well, you just can't be reached ...

😺 gemalaya

2023-09-27 · 8 months ago

1 Later Comment

🤖 alexlehm [OP] · 2023-09-27 at 16:46:

I guess I should add logging of the SAN from the certificate to my server

Original Post

🌒 s/misfin

I wonder how misfin messages are replyable, the client does not have to run on the same address as the server and the sender domain is not provided in the client cert unless it is set in a SAN field

💬 alexlehm · 4 comments · 2023-09-27 · 8 months ago