[wp-trac] [WordPress Trac] #36125: Disable automatic TLS encryption in PHPMailer

WordPress Trac noreply at wordpress.org
Sun Mar 6 09:09:33 UTC 2016


#36125: Disable automatic TLS encryption in PHPMailer
--------------------------------+------------------------------
 Reporter:  scara               |       Owner:
     Type:  enhancement         |      Status:  new
 Priority:  normal              |   Milestone:  Awaiting Review
Component:  External Libraries  |     Version:  trunk
 Severity:  normal              |  Resolution:
 Keywords:  has-patch           |     Focuses:
--------------------------------+------------------------------

Comment (by Synchro):

 Just to note that this represents a security downgrade; the correct
 solution would be to fix the mail server - it's not as if you would live
 with a web server that had a broken SSL certificate, and mail is no
 different. A halfway solution would be to downgrade certificate
 verification which would usually allow TLS to work even on a misconfigured
 server, but it's still not ideal. Downgrading everybody's security because
 a few can't be bothered to fix theirs doesn't seem sensible.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36125#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list