So I’ve read a few articles about verifying TLS is working. Telnet’ing into port 25 on the server, issuing the STARTTLS command, enabling certain SSL Debug options, etc. All of this is nice, but it still doesn’t tell me, with any level of certainty, that e-mails are being encrypted. It would be nice if there was something in the message headers that indicated TLS encryption. Like…
Received: from machine1 ([192.168.1.4])
by server1.acme.com (IBM Domino Release 9.0)
with ESMTP id 2013100911300943-4 ;
Wed, 9 Oct 2013 11:30:09 -0400 (** TLS Verified **)
Outside of the options that I mentioned above, do you know of any way that I can prove that TLS is working? I’m really trying to avoid a Wireshark or sniffer. Thanks.