3 ms·
Google does accept it. To do otherwise would violate the RFCs. They won't accept an e-mail from a user ("submission") without STARTTLS, however. An MUA must n
by jlgaddis 9y ago
Google does accept it. To do otherwise would violate the RFCs.
They won't accept an e-mail from a user ("submission") without STARTTLS, however. An MUA must negotiate the encrypted channel before even being allowed to authenticate. AFAIK, this is pretty much a universal requirement on the {IMAP4,POP3}-over-TLS ports (993,995/TCP) -- it definitely is on the mail servers I run.
- tonyarkles 9y agoRight, but that was my entire point. Just because both users/MUAs are using STARTTLS has no bearing on whether the message is sent in the clear across the internet from MTA to MTA. That's where STARTTLS is worse than HTTPS. With an HTTPS request, there's a pretty good chance that the messages are getting from source-to-destination without ever traversing the Internet in cleartext (modulo MitM with forged certificates)
- jlgaddis 9y agoSorry, you misinterpreted my reply. I agree with you completely. I replied mostly to point out that microcolonel's statement that > Don't accept non-STARTTLS traffic. Google doesn't, ... is incorrect -- as you doubted: > If that's true, I'm both impressed ...
- tonyarkles 9y agoOh! Apologies, didn't notice that you weren't the parent. Cheers :)