A client of the company i work for asked if the email we provided them along with their domain will be SSL / TLS encrypted. We use qmail. What should I check to tell the client for sure that their e-mail communications are encrypted?
migrated from stackoverflow.com Oct 8 '12 at 11:16
This question came from our site for professional and enthusiast programmers.
There are essentially two ways of using SSL/TLS for e-mail (SMTP, POP3, IMAP):
Both should offer the same level of security, provided that they're configured correctly on both sides. The user would have to configure their client accordingly. As a service provider, you could consider providing both.
I don't know qmail very well, but it looks like it requires a patch, at least for STARTTLS support.
You can check whether either of them are enabled using
You could also provide implicit SSL/TLS support by using an external tool like