News for hackers. Stuff that matters.

A comment on TurboTLS: TLS connection establishment with 1 less round trip. Parent comment

Re:TurboTLS: TLS connection establishment with 1 less round ... by j16sdiz on Tuesday February 14, 2023 @02:25PM (#34794597)
I think most SMTP use STARTTLS with preetablished TCP connection..
[ Parent | on HN ]
Re:TurboTLS: TLS connection establishment with 1 less round ... by dwheeler on Tuesday February 14, 2023 @02:41PM (#34794805)
There's a big push to use implicit TLS with SMTP, instead of STARTTLS. Here's a post about that:

https://blog.apnic.net/2021/11/18/vulnerabilities-show-why-s...

[ Parent | on HN ]
Re:TurboTLS: TLS connection establishment with 1 less round ... by mananaysiempre on Tuesday February 14, 2023 @02:38PM (#34794766)
Not sure about real-world statistics, but the current IETF position is that SMTP STARTTLS for mail submission (not transport) is to be phased out in favour of “implicit” SMTP-over-TLS with no cleartext portion, due in part to the former being an implementation minefield[1].

[1] https://datatracker.ietf.org/doc/html/rfc8314#appendix-A

[ Parent | on HN ]
Re:TurboTLS: TLS connection establishment with 1 less round ... by fomine3 on Tuesday February 14, 2023 @08:53PM (#34799050)
Recent submission https://news.ycombinator.com/item?id=34736416
[ Parent | on HN ]