3 ms·
Is it really true that most MTAs don't implement it? Looking through a bunch of random emails of mine (on gmail), I see version=TLSv1 somewhere in the headers,
by cypherpunks01 13y ago
Is it really true that most MTAs don't implement it?
Looking through a bunch of random emails of mine (on gmail), I see version=TLSv1 somewhere in the headers, which I thought indicated that STARTTLS was being used. Am I wrong about this? Or is there some intermediate MTA that might not be using TLS in this case?
- pilif 13y agoCould very well be. You can try and check all Received:-Headers, but there's no obligation that the MTA actually has to write whether TLS was used, nor can you be sure that the MTAs aren't simply adding some TLS string without actually having used TLS. Of the big email providers, only Gmail supports TLS.