<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Given plenty of mail communication is still non-encrypted, having TLS1.0 is an improvement, granted 1.2 is the ultimate goal.<br>
</p>
<p>But shouldn't your public mail server be out of scope for PCI? </p>
<p>Surely it's not handling cardholder data, nor talking to a system that is, therefore should be excluded from the requirement?<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> AusNOG <ausnog-bounces@lists.ausnog.net> on behalf of Bradley Silverman <bsilverman@staff.ventraip.com><br>
<b>Sent:</b> Monday, 23 July 2018 15:06<br>
<b>To:</b> Mark Newton<br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] Issues receiving from TPG Mail servers.</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hi Matt,
<div><br>
</div>
<div>Really appreciate you sending me that email, I will definitely send an email through to there!<br>
<br>
@Mark Certainly not! PCI Compliance requires that TLSv1.0 be disabled on the server. Postifx/Exim/Dovecot are not exception to the rule, if we disable TLSv1.0 on the server and remove the weak cipher, then TPG's MTAs aren't able to send mail to us.</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">Regards,
<div><br>
</div>
<div>Bradley Silverman | VentraIP Australia<br>
<b>Technical Operations</b><br>
<br>
mobile. +61 418 641 103<br>
phone. +61 3 9013 8464<br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Mon, Jul 23, 2018 at 2:48 PM, Mark Newton <span dir="ltr">
<<a href="mailto:newton@atdot.dotat.org" target="_blank">newton@atdot.dotat.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div style="word-wrap:break-word; line-break:after-white-space">You’re trying to exchange payment card information over email?<span class="HOEnZb"><font color="#888888">
<div><br>
</div>
</font></span>
<div><span class="HOEnZb"><font color="#888888"> - mark<br>
</font></span>
<div>
<div><br>
<blockquote type="cite">
<div>
<div class="h5">
<div>On Jul 23, 2018, at 1:30 PM, Bradley Silverman <<a href="mailto:bsilverman@staff.ventraip.com" target="_blank">bsilverman@staff.ventraip.com</a><wbr>> wrote:</div>
<br class="m_2119999520073362170Apple-interchange-newline">
</div>
</div>
<div>
<div>
<div class="h5">
<div dir="ltr">
<div>Does anyone have a contact at TPG regarding their mail servers?</div>
<div><br>
</div>
<div>We are having issues with their mail servers using non-PCI compliant ciphers which is stopping our servers accepting mail from them.</div>
<div><br>
</div>
<br clear="all">
<div>
<div class="m_2119999520073362170gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">Regards,
<div><br>
</div>
<div>Bradley Silverman | VentraIP Australia<br>
<b>Technical Operations</b><br>
<br>
mobile. +61 418 641 103<br>
phone. +61 3 9013 8464<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<span class="">______________________________<wbr>_________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/<wbr>mailman/listinfo/ausnog</a><br>
</span></div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</body>
</html>