STARTTLS support | Voters

STARTTLS support

Mark A Wane

Add support for protocols that use STARTTLS to upgrade from plain text instead of using dedicated SSL ports so that mail servers, etc. can be monitored. As the DROWN attack showed these servers are often neglected compared to webservers.

June 23, 2016

SSLPing

A STARTTLS for SMTP test is not easy to implement... It requires implementing at least a part of SMTP (EHLO command), then switching to TLS...
Also, because sslping does establish many connections in a short time for its tests (up to maybe 50), there's a risk of rate limiting with SMTP I guess... It's less of a problem with direct TLS connections, because it's at a lower protocol level...
but I'll add this need in the list... Note that SMTP/TLS (TCP/465) is easier to work with than STARTTLS/SMTP (TCP/587) and can be tested already ;-)