Charles Marcus:
> On 2010-03-02 2:51 AM, Stan Hoeppner wrote:
> > You've likely been using STARTTLS only, which doesn't require a key exchange
> > as SSL/TLS does.
>
> ? You sure about that? I use only STARTTLS, and I always have to do the
> 'Confirm Security Exception' dance to accept the certificate the first
> time I send a message in Thunderbird...
Port 24 and 587:
TCP handshake,
SMTP handshake, client sends STARTTLS,
TLS handshake, SMTP handshake, MAIL transaction, ...
Port 465:
TCP handshake,
TLS handshake, SMTP handshake, MAIL transaction, ...
Details are in RFC 3207.
Wietse