diff options
| author | zeripath <art27@cantab.net> | 2021-06-21 19:34:37 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-06-21 14:34:37 -0400 |
| commit | 6a083a7234190d078ac51878bb8f39aa53ef1974 (patch) | |
| tree | 51081bc1f7a7b9dee4712b7a8bd75d0b7c58f95b /docs | |
| parent | 681e81babdbbe777b3ea2af353b872aee2dd9b32 (diff) | |
| download | gitea-6a083a7234190d078ac51878bb8f39aa53ef1974.tar.gz gitea-6a083a7234190d078ac51878bb8f39aa53ef1974.zip | |
Update documentation for Implicit TLS (#16220)
As per RFC 8314, it is now recommended to prefer TLS over STARTTLS.
Fix #16160
Signed-off-by: Andrew Thornton <art27@cantab.net>
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/content/doc/advanced/config-cheat-sheet.en-us.md | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/content/doc/advanced/config-cheat-sheet.en-us.md b/docs/content/doc/advanced/config-cheat-sheet.en-us.md index 4f84e2ac33..35deeac02e 100644 --- a/docs/content/doc/advanced/config-cheat-sheet.en-us.md +++ b/docs/content/doc/advanced/config-cheat-sheet.en-us.md @@ -550,9 +550,9 @@ Define allowed algorithms and their minimum key length (use -1 to disable a type - `DISABLE_HELO`: **\<empty\>**: Disable HELO operation. - `HELO_HOSTNAME`: **\<empty\>**: Custom hostname for HELO operation. - `HOST`: **\<empty\>**: SMTP mail host address and port (example: smtp.gitea.io:587). - - Using opportunistic TLS via STARTTLS on port 587 is recommended per RFC 6409. + - As per RFC 8314, if supported, Implicit TLS/SMTPS on port 465 is recommended, otherwise opportunistic TLS via STARTTLS on port 587 should be used. - `IS_TLS_ENABLED` : **false** : Forcibly use TLS to connect even if not on a default SMTPS port. - - Note, if the port ends with `465` SMTPS/SMTP over TLS will be used despite this setting. + - Note, if the port ends with `465` Implicit TLS/SMTPS/SMTP over TLS will be used despite this setting. - Otherwise if `IS_TLS_ENABLED=false` and the server supports `STARTTLS` this will be used. Thus if `STARTTLS` is preferred you should set `IS_TLS_ENABLED=false`. - `FROM`: **\<empty\>**: Mail from address, RFC 5322. This can be just an email address, or the "Name" \<email@example.com\> format. |