6 ms·
It's configurable, as you say. Maybe I don't understand your argument "at least you won't be MITM'ed". Almost nobody runs SMTPS anyways. I'm just saying that if
by 0x0 11y ago
It's configurable, as you say. Maybe I don't understand your argument "at least you won't be MITM'ed". Almost nobody runs SMTPS anyways. I'm just saying that if someone decides they want to enforce encrypted SMTP, it really doesn't matter if that is implemented as mandatory STARTSSL vs SMTPS. One is not more suspectible to MITM than the other.
- feld 11y agoYou missed my edit. The RFC clearly states you are not to enforce encrypted SMTP with STARTTLS to the public internet.
- deleted 11y ago[deleted]