Just in case any Exim users are reading here, you might want to be aware that Exim also does not check TLS certificates reliably, so any authentication credenti

Just in case any Exim users are reading here, you might want to be aware that Exim also does not check TLS certificates reliably, so any authentication credentials (as well as message contents, of course) that you might be transmitting via TLS to a remote server, using Exim as the client, can be intercepted by a MitM if the remote host is specified as a DNS name: https://lists.exim.org/lurker/message/20181228.202226.22d1c497.en.html https://lists.exim.org/lurker/message/20181228.202226.22d1c4... I just tested version 4.92, which is still affected, and it doesn't seem like there is any interest in fixing this vulnerability.