Charles Marcus: > On 2010-03-02 2:51 AM, Stan Hoeppner wrote: > > You've likely been using STARTTLS only, which doesn't require a key exchange > > as SSL/TLS does. > > ? You sure about that? I use only STARTTLS, and I always have to do the > 'Confirm Security Exception' dance to accept the certificate the first > time I send a message in Thunderbird...
Port 24 and 587: TCP handshake, SMTP handshake, client sends STARTTLS, TLS handshake, SMTP handshake, MAIL transaction, ... Port 465: TCP handshake, TLS handshake, SMTP handshake, MAIL transaction, ... Details are in RFC 3207. Wietse