We run an LDAP service attached to our SaaS application. A couple of years ago we were alerted to the fact that iOS devices no longer connected to our LDAPS se

We run an LDAP service attached to our SaaS application. A couple of years ago we were alerted to the fact that iOS devices no longer connected to our LDAPS server running on port 636. macOS still seemed to connect fine.. After some digging, it seemed Apple updated iOS to only accept connecting over STARTTLS on port 389. So we had to run a STARTTLS server also to make iOS devices work. At the time, it seemed STARTTLS over 389 was the "standard", maybe that's why Apple changed it, but looking just now it seems that is being challenged [1][2], and rightly so. [1] https://unix.stackexchange.com/questions/607560/why-is-ldap-with-starttls-preferred-over-ldaps https://unix.stackexchange.com/questions/607560/why-is-ldap-... [2] https://lists.openldap.org/hyperkitty/list/openldap-technical@openldap.org/thread/IXEZAGCOTL5CTSOFNFDE65LURQET6ZZV/#LZ4N3JHGKZVDXRIXNRAM4SHZ44B5U4BP https://lists.openldap.org/hyperkitty/list/openldap-technica...