SMTPS (Simple Mail Transfer Protocol Secure) is a deprecated method for securing SMTP with transport layer security. It is intended to provide authentication of the communication partners, as well as data integrity and confidentiality.
SMTPS is not a proprietary protocol and not an extension of SMTP. It is just a way to secure SMTP at the transport layer. SMTPS uses port 465.
This means that the client and server speak normal SMTP at the application layer, but the connection is secured by SSL or TLS. This happens when the connection is established before any mail data has been exchanged. Since whether or not to use SSL or TLS is not negotiated by the peers, SMTPS services are usually reachable on a dedicated port of their own.
Originally, in early 1997, the Internet Assigned Numbers Authority registered 465 for SMTPS. By the end of 1998, this was revoked when STARTTLS had been specified. With STARTTLS, the same port can be used with or without TLS. SMTP was seen as particularly important, because clients of this protocol are often other mail servers, which can not know whether a server they wish to communicate with will have a separate port for TLS. The port 465 is now registered for Source-Specific Multicast audio and video.
In 2014, many services continue to offer the deprecated SMTPS interface on port 465 in addition to (or instead of) the message submission interface on the port 587 defined by RFC 6409. Service providers that maintain port 465 do so because older Microsoft applications (including Entourage v10.0 and its successor, Outlook for Mac 2011) do not support STARTTLS, and thus do not support the SMTP submission standard (ESMTPS on port 587). The only way for service providers to offer those clients an encrypted connection is to maintain port 465. The Internet-Draft "Cleartext Considered Obsolete: Use of TLS for Email Submission and Access" considers the registration of port 465 for implictily encrypted mail submission.
Video SMTPS
References
Source of article : Wikipedia
0 Comments