port 25 starttls secure connection?

[scherevko]

I use code similar to this:

Pony.mail(:to => 'y...@example.com', :via => :smtp, :via_options => { 
  :address              => 'smtp.my_server.com',
  :port                 => '25', 
  :enable_starttls_auto => true, 
  :user_name            => 'user', 
  :password             => 'MY PASSWORD', 
  :authentication       => :plain,
  :domain               => "localhost.localdomain"
})

where port is 25 and starttls is activated. 

smtp.my_server.com shows 250 STARTTLS or SSL_Session info when I run openssl tests. 

Does this ensure that I will get a secure connection at the end, in other words, will be this an Explicit SSL connection.

Thanks!

[Ben Prew]

STARTTLS over port 25 will likely start as plaintext, but upgrade to TLS.  You could confirm by telnet-ing to port 25 and issuing HELO, if you get a response, it means the server will accept plaintext connection and upgrade them.  If you don't get a response, it means you're on an SSL only connection.

See:

https://www.fastmail.com/help/technical/ssltlsstarttls.html

https://stackoverflow.com/questions/803899/how-do-smtp-clients-determine-whether-to-use-explicit-or-implicit-ssl

[scherevko]

Thanks Ben!