Thank you for writing this, I use it as a reference when explaining the difference STARTTLS and implicit TLS and why people should choose one over the other.
Another nice one is that implicit TLS is SNI routable (and thus much easier to route) -- this is the main reason for me, and I wish the standard had been updated to encourage more people to try 465 (or have a way to specify port in DNS records for example). Huge missed opportunity.
Comments
Thank you for writing this, I use it as a reference when explaining the difference STARTTLS and implicit TLS and why people should choose one over the other.
Another nice one is that implicit TLS is SNI routable (and thus much easier to route) -- this is the main reason for me, and I wish the standard had been updated to encourage more people to try 465 (or have a way to specify port in DNS records for example). Huge missed opportunity.
https://www.fastmail.help/hc/en-us/articles/360060591153-Man... under "Client email auto-discovery"
Though support for these are...
TIL about those DNS configurations.
It does look like they are actually for clients (i.e. MUAs doing IMAP & Submission), not for relay (i.e. MTAs doing SMTP/SMTPS).
I've used MTA-STS and XML to enable auto-config for my stuff:
https://vadosware.io/post/thunderbird-autoconfig-for-your-se...
Oh and it looks like MTA-STS might be the solution:
https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol#...
Turns out there's an excellent guide by the UK government:
https://www.ncsc.gov.uk/collection/email-security-and-anti-s...
https://www.security.gov.uk/guidance/email-guidance/mta-sts/...
Relevant RFC:
https://datatracker.ietf.org/doc/html/rfc8461