I was under the impression that STARTTLS was the only implementation of SMTP ove... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

cm2187 on Sept 18, 2015 | parent | context | favorite | on: Disabling SSLv3 and RC4

I was under the impression that STARTTLS was the only implementation of SMTP over TLS.

If major providers do not respect the STARTTLS protocol and effectively make encryption mandatory that makes me happy. But as far as I know the standard says STARTTLS is optional.

jlgaddis on Sept 18, 2015 [–]

SMTPS (SMTP-over-SSL/TLS) still exists in some places (465/TCP) although it was technically deprecated a long time ago.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact