Konstantin Ryabitsev [off-list ref] writes:
I know that this is confusing terminology, but "tls" stands for "StartTLS",
which works on port 587, and "ssl" starts for "smtps" on port 465.
This reminds me of an earlier discussion we had that somehow petered
out before it resuted in usable improvement,
https://lore.kernel.org/git/xmqqtuo9kgo0.fsf@gitster.g/
I do not think it is feasible to immediately rename the two choices
to SSL/TLS vs StartTLS without transition period, but the first
patch in the three-patch series there to update the documentation
alone may have helped this case.
We may also want to error out when seeing an unknown option other
than 'ssl' and 'tls', as the necessary first step to make it
possible to later safely accept StartTLS as a synonym for 'tls' and
'ssl/tls' as a synonym for 'ssl'.
On Sat, Aug 14, 2021 at 04:36:43PM -0700, Junio C Hamano wrote:
Konstantin Ryabitsev [off-list ref] writes:
quoted
I know that this is confusing terminology, but "tls" stands for "StartTLS",
which works on port 587, and "ssl" starts for "smtps" on port 465.
This reminds me of an earlier discussion we had that somehow petered
out before it resuted in usable improvement,
https://lore.kernel.org/git/xmqqtuo9kgo0.fsf@gitster.g/
I do not think it is feasible to immediately rename the two choices
to SSL/TLS vs StartTLS without transition period, but the first
patch in the three-patch series there to update the documentation
alone may have helped this case.
We may also want to error out when seeing an unknown option other
than 'ssl' and 'tls', as the necessary first step to make it
possible to later safely accept StartTLS as a synonym for 'tls' and
'ssl/tls' as a synonym for 'ssl'.
Is it easier to just add less ambiguous aliases, eventually phasing out old
terminology?
tls -> starttls
ssl -> smtps
This way we don't have to change anything, and "smtps" is a valid way to refer
to smtp over ssl (e.g. see /etc/services for 465/tcp).
-K
On Mon, Aug 16, 2021 at 09:11:43AM -0400, Konstantin Ryabitsev wrote:
quoted
I do not think it is feasible to immediately rename the two choices
to SSL/TLS vs StartTLS without transition period, but the first
patch in the three-patch series there to update the documentation
alone may have helped this case.
We may also want to error out when seeing an unknown option other
than 'ssl' and 'tls', as the necessary first step to make it
possible to later safely accept StartTLS as a synonym for 'tls' and
'ssl/tls' as a synonym for 'ssl'.
Is it easier to just add less ambiguous aliases, eventually phasing out old
terminology?
tls -> starttls
ssl -> smtps
This way we don't have to change anything, and "smtps" is a valid way to refer
to smtp over ssl (e.g. see /etc/services for 465/tcp).
FWIW, those options make quite a bit of sense to me (and I agree the
transition to them would be easy).
-Peff