SecurityScorecard: Weak TLS Protocol Detected on lists.podman.io (Port 25)

[abhraj26]

Hi Podman team,

We’re currently evaluating Podman for use and noticed that your domain lists.podman.io is flagged on SecurityScorecard with a relatively low security score (65), primarily due to support for weak SSL/TLS protocols on Port 25 (IP: 8.43.85.227).

This issue may be impacting Podman.io’s overall security reputation, and we wanted to share this in case it's something your team can address. Here's the specific flag:

Issue: SSL/TLS Service Supports Weak Protocol
IP: 8.43.85.227
Port: 25
Evidence Link: [SecurityScorecard Evidence](https://platform.securityscorecard.io/#/scorecard/podman.io/footprint/asset-details/ip/8.43.85.227/evidence)

If this is managed outside the Podman team or not considered in scope, please let us know happy to direct the feedback elsewhere.

Thanks,
Abhishek
Product Security
RedHat

[jwhonce]

We are looking into this issue and a resolution.

[email protected] is the contact for this issue.