dotnet/runtime

Support implicit TLS for SMTP client

Open

#71.304 aperta il 26 giu 2022

Vedi su GitHub
 (3 commenti) (0 reazioni) (0 assegnatari)C# (5445 fork)batch import
area-System.Net.Securityenhancementhelp wanted

Metriche repository

Star
 (17.886 star)
Metriche merge PR
 (Merge medio 12g 11h) (661 PR mergiate in 30 g)

Descrizione

According to the SMTP client documentation the SmtpClient class supports STARTTLS (Explicit SSL/TLS) and there is no support support for implicit TLS.

There are several issue with STARTTLS:

1-According to RFC 8314 STARTTLS is depreciated and the recommended way is implicit TLS. 2- STARTTLS allows clients to switch to clear text which is a huge problem. 3-A lot of mail servers, firewalls and service providers block port 25 for various reasons and this port is used at first to start STARTTLS.

Implicit TLS is the way to go, please consider adding support for it.

Guida contributor