3 ms·
I think most SMTP use STARTTLS with preetablished TCP connection..
by j16sdiz 4y ago
I think most SMTP use STARTTLS with preetablished TCP connection..
- mananaysiempre 4y agoNot sure about real-world statistics, but the current IETF position is that SMTP STARTTLS for mail submission (not transport) is to be phased out in favour of “implicit” SMTP-over-TLS with no cleartext portion, due in part to the former being an implementation minefield[1]. [1] https://datatracker.ietf.org/doc/html/rfc8314#appendix-A https://datatracker.ietf.org/doc/html/rfc8314#appendix-A
- fomine3 4y agoRecent submission https://news.ycombinator.com/item?id=34736416 https://news.ycombinator.com/item?id=34736416
- dwheeler 4y agoThere's a big push to use implicit TLS with SMTP, instead of STARTTLS. Here's a post about that: https://blog.apnic.net/2021/11/18/vulnerabilities-show-why-starttls-should-be-avoided-if-possible/ https://blog.apnic.net/2021/11/18/vulnerabilities-show-why-s...