There are a lot more protocols that would benefit from the more generic and much... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		userbinator on March 20, 2016 \| parent \| context \| favorite \| on: Internet Draft: SMTP Strict Transport Security There are a lot more protocols that would benefit from the more generic and much simpler solution of "define a standard port where the service listens over TLS". IRCS has settled on 6697: https://tools.ietf.org/html/rfc7194 IMAPS uses 993.

aexaey on March 20, 2016 [–]

Just having a dedicated port for TLS-wrapped version of the protocol wouldn't help here. HTTPS has 443, yet we still need HSTS to enforce it.

That said, dedicated SMTPS port would still be beneficial by cutting down at least 2 RTTs (HELO/EHLO + STARTTLS) from overall transaction time.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact