3 ms·

Any sysadmin worth their salt would’ve seen this coming from a mile off. My self hosted mail server only runs {smtp,imap}s, due to encryption being required fr

• corty 6y ago
  Well, I do run possibly unencrypted smtp on port 25, because I want to receive all my email, not just a tiny fraction of it. Most mails will use smtp and starttls, some plaintext smtp. Nothing uses smtps on 465... Oh, and the smtp submission port 587 of course still uses starttls, which, together with mandatory authentication on that port, also makes for wonderful misconfiguration opportunities on the server. Of course in addition to clients stupidly sending auth over plaintext on 587.
  • user5994461 6y ago
    A ton of embedded systems and software relies on having an open SMTP relay to send emails. Network printers and monitoring solutions are a prime culprit. Companies very often have open SMTP relays, actively used by these. It's a plague to remove SMTP because how can you remove open SMTP when these things don't support TLS nor authentication?