I noticed a mail server I recently became the admin of has both
SMTPS and Submission running for users to send mai through. As far as
I can tell the two do basically the same thing. On that assumption, I
would like to apply the KISS rule and use just one or the other. Which
is one is best is for users to send email?
-Clay
In article <1sp7h3t4jcuhp3r1slh1pnpku9rtop2dt9@4ax.com>,
Clay
>
> I noticed a mail server I recently became the admin of has both
>SMTPS and Submission running for users to send mai through. As far as
>I can tell the two do basically the same thing. On that assumption, I
>would like to apply the KISS rule and use just one or the other. Which
>is one is best is for users to send email?
>
>-Clay
>
You might really want to keep both. SMTPS will encrypt the mail during
the sending of the mail and is usefull for security for remote users
sending sensitive information. However SMTPS is not the default setup
for most user interfaces and you would possibly have to change many user
setups to have everyone use it. You would also have to redo your
submit.cf file to have the sendmail submission agent use SMTPS.
Submission is the default for the sendmail submission agent and for
much other software. It is fine for localy submitted mail (not sent over
a wireless setup or a hotels network).
--
Tom Schulz
schulz@adi.com
In article
schulz@adi.com (Thomas Schulz) wrote:
> In article <1sp7h3t4jcuhp3r1slh1pnpku9rtop2dt9@4ax.com>,
> Clay
> >
> > I noticed a mail server I recently became the admin of has both
> >SMTPS and Submission running for users to send mai through. As far as
> >I can tell the two do basically the same thing. On that assumption, I
> >would like to apply the KISS rule and use just one or the other. Which
> >is one is best is for users to send email?
> >
> >-Clay
> >
>
> You might really want to keep both. SMTPS will encrypt the mail during
> the sending of the mail and is usefull for security for remote users
> sending sensitive information. However SMTPS is not the default setup
> for most user interfaces and you would possibly have to change many user
> setups to have everyone use it. You would also have to redo your
> submit.cf file to have the sendmail submission agent use SMTPS.
> Submission is the default for the sendmail submission agent and for
> much other software. It is fine for localy submitted mail (not sent over
> a wireless setup or a hotels network).
It is worth noting here that the submission protocol allows for
encryption via the STARTTLS extension, which makes it optionally as
secure as the old SMTPS approach, which was obsoleted as one of the wise
changes made in turning Netscape's SSL3 into the IETF's TLS 1.0.
--
Now where did I hide that website...