3

I want my users to stop accessing user accounts like IMAP, SMTP and POP without SSL. I can easily disable non-SSL access, but then everything would break. Is there a way to automatically redirect them? With HTTP it's easy, but with this...? I mean, if the client is configured without SSL, it's not just going to accept SSL, so a simple port redirect isn't going to cut it.

1 Answer 1

2

There's no way (that I know of) to redirect these protocols like it's possible with HTTP.

However, you could set up the TLS enabled servers to the standard TLS ports and also add support for STARTSSL/STARTTLS in non-TLS ports. With STARTTLS many clients might already use secured channel to communicate.

Then little by little start migrate your users to TLS enabled services and announce date when non-TLS services stop working.

1
  • Migrating that way is possible of course, but the problem is the storm of calls from people who don't know how to change to SSL... Something automatic would be nice, but like you, I don't see a way.
    – Halfgaar
    Feb 18, 2011 at 8:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .