Linode Forum Index Linode Forum
Linode Community Forums
 


Understanding the Encryption, StartTLS vs SSL/TLS or nothing

Click here to go to the original topic

 
       Linode Forum Index -> Email/SMTP Related Forum
Author Message
sblantipodi



Joined: 13 May 2009
Posts: 450
Location: Italy

Posted: Tue Nov 08, 2011 1:40 pm    Post subject: Understanding the Encryption, StartTLS vs SSL/TLS or nothing  

As title.
Is it good to use StartTLS over the SSL/TLS?
What is the advantages and what the disadvantages?

Suppose that I use no encryption at all when sending email on port 25. What is the possible security issue that I can experience?

Thanks.
Back to top  
sblantipodi



Joined: 13 May 2009
Posts: 450
Location: Italy

Posted: Fri Nov 11, 2011 7:47 pm    Post subject:  

is there someone on this forum? :)
where did you go?
Back to top  
vonskippy



Joined: 27 Dec 2009
Posts: 469
Location: Colorado, USA

Posted: Fri Nov 11, 2011 9:18 pm    Post subject:  

Probably because basic FYI type questions are better researched on the web, then asking on a community support site (i.e. Google it).

Now if you had a specific question on how to setup SMTP security, that would probably get more attention.

As to do you need to encrypt SMTP traffic, only you know if the traffic is worth securing (well you, and the CIA if you're here in the States).
Back to top  
hybinet



Joined: 02 May 2008
Posts: 1058

Posted: Fri Nov 11, 2011 11:34 pm    Post subject:  

AFAIK, the only advantage of using STARTTLS is that you can accept both plain-text connections and encrypted connections on the same port (25 for SMTP). So you can have your MTA listen on only one port, instead of two or more ports.

I'm not sure if this is a real advantage, because it's not like you're going to run anything else on ports 465 and 587 anyway, and also because some clients have difficulty connecting to port 25 due to ISP firewalls.
Back to top  
sblantipodi



Joined: 13 May 2009
Posts: 450
Location: Italy

Posted: Sat Nov 12, 2011 7:14 am    Post subject:  

vonskippy wrote: Probably because basic FYI type questions are better researched on the web, then asking on a community support site (i.e. Google it).

Now if you had a specific question on how to setup SMTP security, that would probably get more attention.

As to do you need to encrypt SMTP traffic, only you know if the traffic is worth securing (well you, and the CIA if you're here in the States).

try answering with a link and yes I have a question.
http://forum.linode.com/viewtopic.php?t=8010
Back to top  
 
       Linode Forum Index -> Email/SMTP Related Forum
Page 1 of 1