[wp-trac] [WordPress Trac] #36125: Disable automatic TLS encryption in PHPMailer
WordPress Trac
noreply at wordpress.org
Sun Mar 6 09:09:33 UTC 2016
#36125: Disable automatic TLS encryption in PHPMailer
--------------------------------+------------------------------
Reporter: scara | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: External Libraries | Version: trunk
Severity: normal | Resolution:
Keywords: has-patch | Focuses:
--------------------------------+------------------------------
Comment (by Synchro):
Just to note that this represents a security downgrade; the correct
solution would be to fix the mail server - it's not as if you would live
with a web server that had a broken SSL certificate, and mail is no
different. A halfway solution would be to downgrade certificate
verification which would usually allow TLS to work even on a misconfigured
server, but it's still not ideal. Downgrading everybody's security because
a few can't be bothered to fix theirs doesn't seem sensible.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/36125#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list