On 23 Aug, 09:50, Shane <sh...@weasel.is-a-geek.net> wrote:
> http://sial.org/howto/openssl/tls-name/
> The encryption protocol SSL is now named TLS, resulting in two names for the
> same protocol.
Not quite. TLS and SSL operate at different layers in the network
stack, so the method of negotiating the initial connection is
different. With SSL you connect to a server via SSL then start talking
whatever protocol (POP, SMTP in this case). For TLS, you connect to
the server on the standard non-SSL port (110 for POP, 587 for mail
submission) and issue the STARTTLS command to start negotiating
encryption. This means that servers can handle unencrypted sessions
and TLS encrypted sessions on the same port if desired, but it also
means the server application needs to be TLS aware. With SSL you are
forced into using SSL on that port, but you can use SSL wrappers to
encrypt a session to a server application that does not itself support
encryption.