From: Junio C Hamano <gitster@pobox.com>
To: "brian m. carlson" <sandals@crustytoothpaste.net>
Cc: sndanailov@wired4ever.net, git@vger.kernel.org
Subject: Re: [PATCH] docs: git-send-email: difference between ssl and tls smtp-encryption
Date: Mon, 10 Oct 2022 16:56:20 -0700 [thread overview]
Message-ID: <xmqq35bvz10b.fsf@gitster.g> (raw)
In-Reply-To: <Y0R2AwKuXAVMP5Ma@tapette.crustytoothpaste.net> (brian m. carlson's message of "Mon, 10 Oct 2022 19:44:03 +0000")
"brian m. carlson" <sandals@crustytoothpaste.net> writes:
>> --smtp-encryption=<encryption>::
>> + Specify the encryption to use, either 'ssl' or 'tls'. Any other
>> + value reverts to plain SMTP. The difference between the two for Git is
>> + that 'ssl' uses implicit encryption and defaults to port 465, 'tls'
>> + uses explicit encryption and defaults to port 25. Other ports might be
>> + used by the SMTP server. Default is the value of
>> `sendemail.smtpEncryption`.
>
> This is a definite improvement, but maybe we'd want to say that 'tls' is
> really STARTTLS, while 'ssl' is always-on encryption over a dedicated
> port. It might also be worth mentioning that the choice of name doesn't
> affect the actual protocol and version used and the user is almost
> certainly using TLS either way.
So, it is not really specifying "the encryption", rather the way to
get into the encrypted communication.
I think the prose is OK, as long as we are not adding the third
value, at which time we may want to use enumeration instead.
Specify how SMTP connection should be entered into encrypted
mode. The valid values are 'ssl' and 'tls'. Any other value
reverts to plain (unencrypted) SMTP. 'ssl' refers to "implicit"
encryption (sometimes calls SMTPS) that uses port 465 or 587 by
default. 'tls' refers to "explicit" encryption (often known as
STARTTLS) that uses port 25 by default. Despite their names, it
is likely the user is using the newer TLS protocol, not the
deprecated SSL, for the actual encryption protocol either way.
+
Other ports might be used by the SMTP server. Default is the value of
`sendemail.smtpEncryption`.
We might want to
* introduce synonyms implicit/smtps vs explicit/starttls and
deprecate the current confusing names over time?
* error out when invalid value is given, instead of silently
talking plaintext SMTP?
next prev parent reply other threads:[~2022-10-10 23:56 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-10-10 17:28 [PATCH] docs: git-send-email: difference between ssl and tls smtp-encryption sndanailov
2022-10-10 19:11 ` Junio C Hamano
2022-10-10 19:44 ` brian m. carlson
2022-10-10 23:56 ` Junio C Hamano [this message]
2022-10-11 0:20 ` Aaron Schrab
2022-10-11 14:06 ` Philip Oakley
2022-10-11 15:49 ` Sotir Danailov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=xmqq35bvz10b.fsf@gitster.g \
--to=gitster@pobox.com \
--cc=git@vger.kernel.org \
--cc=sandals@crustytoothpaste.net \
--cc=sndanailov@wired4ever.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.