3 ms·
Thank you for writing this, I use it as a reference when explaining the difference STARTTLS and implicit TLS and why people should choose one over the other. A
by hardwaresofton 3y ago
Thank you for writing this, I use it as a reference when explaining the difference STARTTLS and implicit TLS and why people should choose one over the other.
Another nice one is that implicit TLS is SNI routable (and thus much easier to route) -- this is the main reason for me, and I wish the standard had been updated to encourage more people to try 465 (or have a way to specify port in DNS records for example). Huge missed opportunity.
- justsomehnguy 3y ago> or have a way to specify port in DNS records for example https://www.fastmail.help/hc/en-us/articles/360060591153-Manual-DNS-configuration https://www.fastmail.help/hc/en-us/articles/360060591153-Man... under "Client email auto-discovery" Though support for these are...
- hardwaresofton 3y agoTIL about those DNS configurations. It does look like they are actually for clients (i.e. MUAs doing IMAP & Submission), not for relay (i.e. MTAs doing SMTP/SMTPS). I've used MTA-STS and XML to enable auto-config for my stuff: https://vadosware.io/post/thunderbird-autoconfig-for-your-self-hosted-mailserver https://vadosware.io/post/thunderbird-autoconfig-for-your-se... Oh and it looks like MTA-STS might be the solution: https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol#SMTP_MTA_Strict_Transport_Security https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol#... Turns out there's an excellent guide by the UK government: https://www.ncsc.gov.uk/collection/email-security-and-anti-spoofing/using-mta-sts-to-protect-the-privacy-of-your-emails https://www.ncsc.gov.uk/collection/email-security-and-anti-s... https://www.security.gov.uk/guidance/email-guidance/mta-sts/set-up https://www.security.gov.uk/guidance/email-guidance/mta-sts/... Relevant RFC: https://datatracker.ietf.org/doc/html/rfc8461 https://datatracker.ietf.org/doc/html/rfc8461