hmLoadTopic({
hmKeywords:"Certificates,Email SSL,Secure Sockets Layer protocol,SSL & Certificates,STARTTLS,STLS,TLS,WorldClient,WorldClient SSL,WorldClient WorldClient SSL",
hmTitle:"SSL & TLS",
hmDescription:"MDaemon supports the Secure Sockets Layer (SSL)\/Transport Layer Security (TLS) protocol for SMTP, POP, and IMAP, and for MDaemon Remote Administration and Webmail\'s web server....",
hmPrevLink:"screening_from-header-screening.html",
hmNextLink:"ssl_mdaemon.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager",
hmTitlePath:"Security Menu > Security Manager > SSL & TLS",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">SSL &amp; TLS<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText\"><span class=\"f_BodyText\">MDaemon supports the Secure Sockets Layer (SSL)\/Transport Layer Security (TLS) protocol for <a href=\"ssl_mdaemon.html\" class=\"topiclink\">SMTP, POP, and IMAP<\/a>, and for <a href=\"ssl_webadmin.html\" class=\"topiclink\">MDaemon Remote Administration<\/a> and <a href=\"ssl_worldclient.html\" class=\"topiclink\">Webmail\'s<\/a> web server. The SSL protocol, developed by Netscape Communications Corporation, is the standard method for securing server\/client Internet communications. It provides server authentication, data encryption, and optional client authentication for TCP\/IP connection. Further, because SSL is built into all current major browsers, simply installing a valid digital certificate on your server will activate the connecting browser<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s SSL capabilities when connecting to MDRA or Webmail.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">If you are connecting to the standard mail ports via a mail client instead of using Webmail, MDaemon supports the STARTTLS extension over TLS for SMTP and IMAP, and the STLS extension for POP3. However, you must first have your client configured to use SSL, and it must support those extensions—not all mail clients support them. Use the <a href=\"ssl_white-list.html\" class=\"topiclink\">No STARTTLS List<\/a> and <a href=\"ssl_starttls-required-list.html\" class=\"topiclink\">STARTTLS List<\/a> pages to designate specific hosts and addresses that must not or must, respectively, use STARTTLS.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The SSL &amp; TLS dialog also contains a page for enabling <a href=\"ssl_dnssec.html\" class=\"topiclink\">DNSSEC<\/a> (DNS Security Extensions), the <\/span><span class=\"f_BodyText\"><a href=\"ssl_smtp-extensions.html\" class=\"topiclink\">SMTP Extensions<\/a> page for enabling <\/span><span class=\"f_ControlIndent\">RequireTLS, MTA-STA, and TLS Reporting, and the <a href=\"ssl_lets-encrypt.html\" class=\"topiclink\">Let\'s Encrypt<\/a> page for when using the Let\'s Encrypt <\/span><span class=\"f_BodyText\">Certificate Authority (CA).<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The options for enabling and configuring SSL are located under the SSL &amp; TLS section of the Security Settings dialog at: <\/span><span class=\"f_MenuPath\">Security <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Security Manager <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> SSL &amp; TLS<\/span><span class=\"f_BodyText\">. The SSL port settings for SMTP, POP3, and IMAP are located on the <a href=\"default-domain-and-servers_ports.html\" class=\"topiclink\">Ports<\/a> screen at: <\/span><span class=\"f_MenuPath\">Setup <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Server Settings <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> DNS &amp; IPs<\/span><span class=\"f_BodyText\">. The HTTPS ports for <a href=\"ssl_worldclient.html\" class=\"topiclink\">Webmail<\/a> and <a href=\"ssl_webadmin.html\" class=\"topiclink\">Remote Administration<\/a> are located on there respective screens.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For information on creating and using SSL Certificates, see:<\/span><\/p>\n\r<p style=\"margin: 0.3125rem 0.5625rem 1.5000rem 1.5000rem;\"><span class=\"f_DialogSectionHeading\"><a href=\"ssl_creating_and_using_ssl_certifi.html\" class=\"topiclink\">Creating &amp; Using SSL Certificates<\/a><\/span><span class=\"f_ControlIndent\"> <\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">—<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The TLS\/SSL protocol is addressed in RFC-4346: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc4346\" target=\"_blank\" class=\"weblink\" title=\"The Transport Layer Security (TLS) Protocol Version 1.1\">The Transport Layer Security (TLS) Protocol Version 1.1<\/a><\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The STARTTLS extension for SMTP is addressed in RFC-3207: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc3207\" target=\"_blank\" class=\"weblink\" title=\"SMTP Service Extension for Secure SMTP over Transport Layer Security\">SMTP Service Extension for Secure SMTP over Transport Layer Security<\/a><\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Using TLS with the IMAP and POP3 protocols is addressed in RFC-2595: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc2595\" target=\"_blank\" class=\"weblink\" title=\"Using TLS with IMAP, POP3 and ACAP\">Using TLS with IMAP, POP3 and ACAP<\/a><\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">DNSSEC (DNS Security Extensions) is defined in: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc4033\" target=\"_blank\" class=\"weblink\" title=\"RFC-4033: DNS Security Introduction and Requirements\">RFC-4033: DNS Security Introduction and Requirements<\/a> and <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc4035\" target=\"_blank\" class=\"weblink\" title=\"RFC-4035: Protocol Modifications for the DNS Security Extensions\">RFC-4035: Protocol Modifications for the DNS Security Extensions<\/a> as <\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For a complete description of RequireTLS, see: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc8689\" target=\"_blank\" class=\"weblink\" title=\"SMTP Require TLS Option\">RFC 8689: SMTP Require TLS Option<\/a>.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">MTA-STS support is described in <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc8461\" target=\"_blank\" class=\"weblink\" title=\"SMTP MTA Strict Transport Security (MTA-STS)\">RFC 8461: SMTP MTA Strict Transport Security (MTA-STS)<\/a>.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">TLS Reporting is discussed in <a href=\"https:\/\/tools.ietf.org\/html\/rfc8460\" target=\"_blank\" class=\"weblink\" title=\"SMTP TLS Reporting\">RFC 8460: SMTP TLS Reporting<\/a>.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ssl_mdaemon.html\" class=\"topiclink\">SSL &amp; TLS » MDaemon<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ssl_worldclient.html\" class=\"topiclink\">SSL &amp; TLS » Webmail<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ssl_webadmin.html\" class=\"topiclink\">SSL &amp; TLS » Remote Administration<\/a><\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
