Questions tagged [starttls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
21
votes
5answers
112k views

How can I verify that SSLv3 protocol is disabled?

I'm trying to disable SSLv3 in ejabberd 2.1.10 on Ubuntu 12.04. There is no way to disable it in config file, so I have to patch the source and rebuild the package: https://github.com/processone/...
8
votes
2answers
1k views

Why are common services using implicit SSL not considered obsolete in the way that SMTPS is?

SMTPS (implicit SSL) has been deprecated/obsolete since SMTP+STARTTLS (explicit SSL) was defined in RFC2487. I'm not entirely clear on the reasoning behind that, but it was clearly considered a good ...
2
votes
1answer
405 views

Is traffic subsequent to a SASL/GSSAPI bind encrypted?

When making a SASL/GSSAPI bind to an LDAP server over port 389 (ldap:///), after the authentication is finished is the resulting LDAP traffic encrypted? If so, is there a document or RFC that ...
0
votes
1answer
1k views

Sending Mail Using TLS

I run a simple web service, and I need to securely send emails to users via PHP. There are no mailboxes/accounts involved. It is a simple send-only function. Without involving PGP, I have come up ...