Re: Fedora Core 2 wishlists

[Chris Ricker <kaboom gatech edu>]

On Tue, 9 Dec 2003, Chris Adams wrote:

> Once upon a time, Daniel Roesen <dr cluenet de> said:
> > - Postfix default MTA, probably get rid of sendmail altogether
> 
> Don't get rid of sendmail unless you've got something to replace it.
> Last I looked, postfix cannot replace sendmail on my servers, although
> it is a lot better than qmail (gag!).

Out of curiosity, why not?

> What is the bias against sendmail?  Don't give me security history; how
> many security holes have there been in OpenSSL, OpenSSH, Apache, the
> Linux kernel, rsync, etc. over the last couple of years?  Now, how many
> in sendmail?  I don't see people ranting to replace OpenSSH because they
> recently had several security releases in less than a week.

Postfix is a viable alternative to sendmail with a much better security
history and architecture. These other projects don't have secure usable
replacements.

later,
chris