Philipp Hartwig wrote:
My understanding is that stunnel will now exclusively accept the server certificate stored in the imaps.pem file rendering all MITM attacks impossible.
I'd be grateful if someone could confirm that this setup makes sense. Is this the way the verify=3 option is supposed to use?
Yes, this is exactly the way "verify = 3" is supposed to be used.
Mike