Questions tagged [starttls]
22 questions
1
vote
1 answer
SMTP Service STARTTLS Plaintext Command Injection
We are getting this vulnerability on SUSE Linux Enterprise Server 11. This vulnerability is getting triggered on port 587 for postfix. I have checked several links but I am unable to get any relevant solution for it.
Has anybody faced an issue with…
![](../../users/profiles/187505.webp)
Esskay
- 11
- 1
1
vote
0 answers
How to Force STARTTLS on Outlook and other clients
I am currently writing an essay about securing E-Mails. Now I'm at the point where I want to know if it´s possible to force STARTTLS in connections via SMTP or POP3/IMAP from the clients' side. I know I can configure the client so it uses STARTTLS…
![](../../users/profiles/125167.webp)
Cyberduck
- 628
- 4
- 17
0
votes
1 answer
Is LDAPS or StartTLS more secure?
This question has been asked and answered here, here, and also basically here. I'm asking again because the answers and information is conflicting.
LDAPS:
According to Wikipedia (and its RFC sources) LDAPS was LDAPv2, never standardized, and is…
![](../../users/profiles/270908.webp)
jeffrey.d.m
- 111
- 5
0
votes
1 answer
LDAP StartTLS encryption - which TLS versions are supported?
I am looking to set a third party application to authenticate with our domain. The application supports LDAPv3 and we have opted to use the start StartTLS extension to encrypt the credentials from the source host application towards the domain…
![](../../users/profiles/238046.webp)
arbi
- 1
- 1
0
votes
1 answer
How SSL works in SMTP?
Whenever I see a red lock icon in gmail, I thought the sender doesn't have SSL configured.
But one person told me only server (gmail in our case) SSL is enough?
Does that mean the sender don't need to configure any SSL at all and can communicate…
![](../../users/profiles/119124.webp)
Giri
- 145
- 4
0
votes
1 answer
Trusting a fraudulent/not trusted CAs for STARTTLS/SMTP
When using STARTTLS for SMTP, should one trust CAs that are not trusted by major browser like for example WoSign or StartCom?
As STARTTLS falls back to plaintext it seems an encrypted transmission via a not trusted certificate would still be better…
![](../../users/profiles/122008.webp)
architekt
- 986
- 1
- 7
- 18
0
votes
1 answer
Sending Mail Using TLS
I run a simple web service, and I need to securely send emails to users via PHP.
There are no mailboxes/accounts involved. It is a simple send-only function.
Without involving PGP, I have come up with the following options -
Use local SMTP server…
![](../../users/profiles/122359.webp)
MrRobot909
- 3
- 2