For SSL/TLS connections, is there some way to tell cyrus-imap what sorts of encryption to allow? Apache's mod_ssl, for example, has the SSLCipherSuite directive, which I use thusly:
SSLCipherSuite HIGH:+MEDIUM:-LOW:-EXP:-ADH:-NULL The touble with simply allowing all ciphers supported by OpenSSL is that OpenSSL has support (as it should) for some weak algorithms and some old algorithms now known to be broken.
