Hacker News new | ask | show | jobs
by the_zeroth_law 2921 days ago
One of the nice features of the policy list is that you can put your server on it in testing mode. In testing mode, any failure in TLS negotiation is logged and reported, but the message is sent over the insecure communication. So it shouldn't cause any breakage.

See https://github.com/EFForg/starttls-everywhere/blob/master/RU... for more info.

1 comments

OK, that's interesting and does indeed help in taking away that concern.

Another question if I may.

The site mentions:

> the STARTTLS Policy List gives mail servers another point of reference to discover whether other mail servers support STARTTLS

Is there any email provider, email server component or email client that already uses this policy list?

Because that's another thing I miss from the FAQ.