User Tools

Site Tools


how_to:encrypt_sessions

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
how_to:encrypt_sessions [2015/06/24 09:28] paulhow_to:encrypt_sessions [2017/09/12 12:33] paul
Line 6: Line 6:
 VPOP3 supports two methods of encryption: VPOP3 supports two methods of encryption:
   - SSL - this is an old method of encrypting sessions which is not supported by the standards. However, some popular email clients such as Microsoft Outlook & Outlook Express only support this method. Other email clients such as Mozilla Thunderbird also support this for backward compatibility. SSL connections are usually done on a different TCP port from normal (eg POP3 is on port 110, POP3S is on port 995). SSL connections are encrypted from the start, so any connections on that port MUST be encrypted.    - SSL - this is an old method of encrypting sessions which is not supported by the standards. However, some popular email clients such as Microsoft Outlook & Outlook Express only support this method. Other email clients such as Mozilla Thunderbird also support this for backward compatibility. SSL connections are usually done on a different TCP port from normal (eg POP3 is on port 110, POP3S is on port 995). SSL connections are encrypted from the start, so any connections on that port MUST be encrypted. 
-  - STARTTLS - (this is called 'TLS' in older versions of VPOP3) this is the encryption method supported by the standards. This is supported by the more modern email clients such as Mozilla Thunderbird, Opera, etc. Outlook & Outlook Express do not currently support this method. STARTTLS connections are carried out on the same port as normal (eg port 110 for POP3). With STARTTLS connections they start off unencrypted, then the client tells the server it wants an encrypted session, so it becomes encrypted. With STARTTLS you can tell VPOP3 to either allow plain or encrypted sessions, or to require encrypted sessions.+  - STARTTLS - (this is called 'TLS' in older versions of VPOP3) this is the encryption method supported by the standards. This is supported by the more modern email clients such as Mozilla Thunderbird, Opera, etc. Older versions of Outlook & Outlook Express do not support this method, but recent versions of Outlook do. STARTTLS connections are carried out on the same port as normal (eg port 110 for POP3). With STARTTLS connections they start off unencrypted, then the client tells the server it wants an encrypted session, so it becomes encrypted. With STARTTLS you can tell VPOP3 to either allow plain or encrypted sessions, or to require encrypted sessions.
  
 STARTTLS encryption can be used for incoming SMTP connections, if the sending SMTP server supports STARTTLS as well as the receiving server. SSL encryption cannot be used for incoming SMTP connections. For any SMTP server which allows incoming connections, you **must** allow either encrypted or plain sessions, or some mail senders will not be able to send mail to you. STARTTLS encryption can be used for incoming SMTP connections, if the sending SMTP server supports STARTTLS as well as the receiving server. SSL encryption cannot be used for incoming SMTP connections. For any SMTP server which allows incoming connections, you **must** allow either encrypted or plain sessions, or some mail senders will not be able to send mail to you.
how_to/encrypt_sessions.txt · Last modified: 2018/11/14 10:45 by 127.0.0.1