STARTTLS is only enabled if an authenticator is used
----------------------------------------------------

                 Key: EMAIL-106
                 URL: https://issues.apache.org/jira/browse/EMAIL-106
             Project: Commons Email
          Issue Type: Bug
            Reporter: Bruno Harbulot


The STARTTLS parameter is only set if an authenticator is used, whereas the two 
features are independent: it would also make sense to use STARTTLS without 
authentication, so as to protect eavesdropping of the e-mail content, for 
example.

Here is a patch for {{src/java/org/apache/commons/mail/Email.java}} (rev. 
1088801):

{code}
@@ -481,9 +481,9 @@ public abstract class Email implements EmailConstants
             properties.setProperty(MAIL_HOST, this.hostName);
             properties.setProperty(MAIL_DEBUG, String.valueOf(this.debug));
 
+            properties.setProperty(MAIL_TRANSPORT_TLS, tls ? "true" : "false");
             if (this.authenticator != null)
             {
-                properties.setProperty(MAIL_TRANSPORT_TLS, tls ? "true" : 
"false");
                 properties.setProperty(MAIL_SMTP_AUTH, "true");
             }
{code}


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to