dotnet/runtime

Support implicit TLS for SMTP client

Open

#71,304 opened on 2022年6月26日

GitHub で見る
 (3 comments) (0 reactions) (0 assignees)C# (5,445 forks)batch import
area-System.Net.Securityenhancementhelp wanted

Repository metrics

Stars
 (17,886 stars)
PR merge metrics
 (平均マージ 12d 11h) (30d で 661 merged PRs)

説明

According to the SMTP client documentation the SmtpClient class supports STARTTLS (Explicit SSL/TLS) and there is no support support for implicit TLS.

There are several issue with STARTTLS:

1-According to RFC 8314 STARTTLS is depreciated and the recommended way is implicit TLS. 2- STARTTLS allows clients to switch to clear text which is a huge problem. 3-A lot of mail servers, firewalls and service providers block port 25 for various reasons and this port is used at first to start STARTTLS.

Implicit TLS is the way to go, please consider adding support for it.

コントリビューターガイド