[wp-trac] [WordPress Trac] #36125: Disable automatic TLS encryption in PHPMailer

WordPress Trac noreply at wordpress.org
Sun Mar 6 07:42:25 UTC 2016


#36125: Disable automatic TLS encryption in PHPMailer
--------------------------------+-----------------------------
 Reporter:  scara               |      Owner:
     Type:  enhancement         |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  External Libraries  |    Version:  trunk
 Severity:  normal              |   Keywords:
  Focuses:                      |
--------------------------------+-----------------------------
 Since 5.2.10, PHPMailer has added a new feature to automatically use TLS
 encryption when available at the SMTP server side, via `SMTPAutoTLS`.
 This setting is `true` by default which is kind of security feature but in
 real life this is causing headaches due to wrongly configured SMTP server
 with regards to TLS support (see e.g.:
 https://github.com/PHPMailer/PHPMailer/issues/642,
 https://github.com/PHPMailer/PHPMailer/issues/643).

 That setting should be set to `false` to allow WP admin people to select
 TLS support **only when** it is actually supported by their SMTP server.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36125>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list