On 21/09/2018 11.33, I wrote:
On 21/09/2018 11.17, James Knott wrote:
On 09/21/2018 11:14 AM, Carlos E. R. wrote:
TLS or STARTTLS? I would expect STARTTLS as it has to be able to handle servers that don't support TLS. <2.6> 2018-07-15 23:12:30 Legolas postfix 32003 - - Anonymous TLS connection established to smtp.telefonica.net[86.109.99.70]:25: TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)
It says TLSv1.2 there.
STARTTLS is just the means of determining whether a connection can support TLS or just plain text. If it supports TLS, it would look exactly like regular TLS after the connection is established.
Understood.
Then I do not see how I can find out if it is STARTTLS. Maybe by increasing verbosity of the log.
Now that I remember, I had to implement TLS support on postfix at some point or I was unable to send (on :25). But IIRC it was gmail who insisted, not Telefonica at that point. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.0 (Legolas))