• Opportunistic TLS (redirect from Starttls)
    org S: 250-mail.example.org offers a warm hug of welcome S: 250 STARTTLS C: STARTTLS S: 220 Go ahead C: <starts TLS negotiation> C & S: <negotiate a TLS...
    12 KB (1,228 words) - 01:43, 7 April 2024
  • Simple Mail Transfer Protocol (section STARTTLS or "Opportunistic TLS")
    hence the term opportunistic TLS. STARTTLS is effective only against passive observation attacks, since the STARTTLS negotiation happens in plain text...
    62 KB (7,344 words) - 10:29, 11 July 2024
  • Email encryption
    Similar STARTTLS extensions exist for the communication between an email client and the email server (see IMAP4 and POP3, as stated by RFC 2595). STARTTLS may...
    14 KB (1,671 words) - 14:27, 30 June 2024
  • SMTPS
    registered port 465 for smtps. Late 1998 this was revoked when STARTTLS was standardized. With STARTTLS, the same port can be used with or without TLS. The use...
    6 KB (718 words) - 19:31, 31 October 2023
  • Man-in-the-middle attack
    Sebastian (August 13, 2021). Why TLS Is Better Without STARTTLS: A Security Analysis of STARTTLS in the Email Context (PDF). 30th USENIX Security Symposium...
    22 KB (2,371 words) - 15:40, 2 August 2024
  • SMTP Authentication
    S: 250-AUTH GSSAPI DIGEST-MD5 S: 250-ENHANCEDSTATUSCODES S: 250 STARTTLS C: STARTTLS S: 220 Ready to start TLS ... TLS negotiation proceeds. Further commands...
    10 KB (1,229 words) - 18:58, 17 April 2024
  • Network News Transfer Protocol
    plain-text connection over port 119 may be changed to use TLS via the STARTTLS command. In October 2006, the IETF released RFC 3977, which updates NNTP...
    4 KB (503 words) - 04:39, 6 May 2024
  • Comparison of webmail providers
    Additional notes like usage of DMARC, ARC Ability to use STARTTLS over SMTP Verified with https://starttls-everywhere.org/ or other SPF is configured and outbound...
    72 KB (2,895 words) - 10:13, 24 July 2024
  • Thumbnail for Cricket Wireless
    Cricket Wireless (section STARTTLS stripping attack)
    privacy firm in June 2014, Golden Frog determined that Cricket masked the STARTTLS command in email server responses, thereby "putting its customers at serious...
    20 KB (1,892 words) - 02:14, 18 July 2024
  • Opportunistic encryption
    using the SMTP STARTTLS extension for relaying messages across the Internet, or the Internet Message Access Protocol (IMAP) STARTTLS extension for reading...
    11 KB (1,277 words) - 12:32, 3 April 2024