Incorrect phrasing of mail encryption

[Mr. Jinx]

Affected version

2.2

Xenforo is using the following phrases for email encryption:

• None
• TLS
• SSL

Looking at the mail standards, we have STARTTLS and SSL/TLS.
I think Xenforo uses TLS as STARTTLS and SSL as SSL/TLS.
Just a side note: STARTTLS would be less secure than SSL/TLS, so it is important to use correct naming convention.

The list should be:

• None
• STARTTLS
• SSL/TLS

 

[Kirby]

PHP itself calls StartTLS connections "TLS" and implicit TLS connections "SSL" so the naming used by XenForo is not entirely "wrong" from this point of view.

However I totally agree that is is confusing and should be changed - just because PHP itself does a bad job on naming things doesn't mean XenForo has to stick with that.