TLS encrypts the connection between two systems. For AuthSMTP customers that includes the connection used to submit mail and, where the receiving server supports it, the connection used for onward delivery.
Submission and delivery are different connections
- Configure your application to use the secure settings supplied for the AuthSMTP account.
- Validate certificates; do not disable verification to make an error disappear.
- Keep the operating system and TLS library supported and patched.
- Remember that ordinary SMTP delivery may be opportunistic unless a separate policy enforces TLS.
- TLS does not encrypt a message once it is stored or displayed at either end.
See AuthSMTP SSL/TLS support and the relevant setup guide for your application. If the message itself must remain unreadable to intermediaries or mailbox operators, use a suitable end-to-end technology and key-management process.
Key takeaway
Use an encrypted AuthSMTP submission connection and avoid sending sensitive content that requires end-to-end protection as ordinary email.
Use an encrypted AuthSMTP submission connection and avoid sending sensitive content that requires end-to-end protection as ordinary email.
Practical next step
Confirm that the application connects using TLS with certificate validation enabled, then inspect a received message's transport-security details.