Hi List,

As you know AstLinux's mail forwarder supports both TLS/STARTTLS (TCP 587) and 
SSL/SMTP (TCP 465).

I ran across a very well written article that is worth sharing:

SSL vs TLS vs STARTTLS
https://www.fastmail.com/help/technical/ssltlsstarttls.html

The current best practice is to use SMTP "implicit TLS" over port 465:
https://tools.ietf.org/html/rfc8314#section-3

This seems like good advice since STARTTLS starts as cleartext and things can 
go wrong.

Unfortunately, some email clients hide the STARTTLS option and don't 
automatically disable STARTTLS when port 465 is chosen, Mail in iOS 12 is one 
such example.

At least with AstLinux, choosing "SSL/SMTP" (no STARTTLS) and port 465 works, 
and the current best practice.

Lonnie



_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to