| Author |
Message |
sblantipodi
Joined: 13 May 2009
Posts: 450
Location: Italy
|
| Posted: Tue Nov 08, 2011 1:40 pm Post subject: Understanding the Encryption, StartTLS vs SSL/TLS or nothing |
|
|
As title.
Is it good to use StartTLS over the SSL/TLS?
What is the advantages and what the disadvantages?
Suppose that I use no encryption at all when sending email on port 25. What is the possible security issue that I can experience?
Thanks. |
|
| Back to top |
|
sblantipodi
Joined: 13 May 2009
Posts: 450
Location: Italy
|
| Posted: Fri Nov 11, 2011 7:47 pm Post subject: |
|
|
is there someone on this forum? :)
where did you go? |
|
| Back to top |
|
vonskippy
Joined: 27 Dec 2009
Posts: 469
Location: Colorado, USA
|
| Posted: Fri Nov 11, 2011 9:18 pm Post subject: |
|
|
Probably because basic FYI type questions are better researched on the web, then asking on a community support site (i.e. Google it).
Now if you had a specific question on how to setup SMTP security, that would probably get more attention.
As to do you need to encrypt SMTP traffic, only you know if the traffic is worth securing (well you, and the CIA if you're here in the States). |
|
| Back to top |
|
hybinet
Joined: 02 May 2008
Posts: 1058
|
| Posted: Fri Nov 11, 2011 11:34 pm Post subject: |
|
|
AFAIK, the only advantage of using STARTTLS is that you can accept both plain-text connections and encrypted connections on the same port (25 for SMTP). So you can have your MTA listen on only one port, instead of two or more ports.
I'm not sure if this is a real advantage, because it's not like you're going to run anything else on ports 465 and 587 anyway, and also because some clients have difficulty connecting to port 25 due to ISP firewalls. |
|
| Back to top |
|
sblantipodi
Joined: 13 May 2009
Posts: 450
Location: Italy
|
| Posted: Sat Nov 12, 2011 7:14 am Post subject: |
|
|
vonskippy wrote: Probably because basic FYI type questions are better researched on the web, then asking on a community support site (i.e. Google it).
Now if you had a specific question on how to setup SMTP security, that would probably get more attention.
As to do you need to encrypt SMTP traffic, only you know if the traffic is worth securing (well you, and the CIA if you're here in the States).
try answering with a link and yes I have a question.
http://forum.linode.com/viewtopic.php?t=8010 |
|
| Back to top |
|
| |