[GH-ISSUE #391] Is session encrypted when "SSL (Optional)" is set? #330

New issue

Closed

opened 2026-02-26 00:36:52 +03:00 by kerem · 1 comment

kerem commented

2026-02-26 00:36:52 +03:00

Owner

Originally created by @krpage on GitHub (Nov 11, 2013).
Original GitHub issue: https://github.com/jberkel/sms-backup-plus/issues/391

When the "SSL (Optional)" option is set as advised to work around self-signed certificates, is the connection to the server still encrypted using SSL? i.e. is it just the certificate acceptance level that is lowered? (in which case perhaps there could be a clearer option description?)

Originally created by @krpage on GitHub (Nov 11, 2013). Original GitHub issue: https://github.com/jberkel/sms-backup-plus/issues/391 When the "SSL (Optional)" option is set as advised to work around self-signed certificates, is the connection to the server still encrypted using SSL? i.e. is it just the certificate acceptance level that is lowered? (in which case perhaps there could be a clearer option description?)

kerem closed this issue

2026-02-26 00:36:52 +03:00

kerem commented

2026-02-26 00:36:53 +03:00

Author

Owner

@strayer commented on GitHub (Dec 11, 2013):

I wondered about this too. When setting "SSL (Optional)" it looks like the app actually uses STARTTLS over SSL.
Since I disabled unencrypted logins on my mailserver I'm pretty sure that this option only disables certificate verification, but I couldn't find anything helpful in the code since this seems to be buried in some K9 classes and I couldn't track that down :(
It would be nice if someone could look into this and maybe update the descriptions, as suggested in the issue.

My mailserver logs this:
Dec 11 21:49:41 localhost dovecot: imap-login: Login: user=<...>, method=PLAIN, rip=123.123.123.123, lip=321.321.321.321, mpid=123, TLS, session=<...>
Note the TLS.

@strayer commented on GitHub (Dec 11, 2013): I wondered about this too. When setting "SSL (Optional)" it looks like the app actually uses STARTTLS over SSL. Since I disabled unencrypted logins on my mailserver I'm pretty sure that this option only disables certificate verification, but I couldn't find anything helpful in the code since this seems to be buried in some K9 classes and I couldn't track that down :( It would be nice if someone could look into this and maybe update the descriptions, as suggested in the issue. My mailserver logs this: Dec 11 21:49:41 localhost dovecot: imap-login: Login: user=<...>, method=PLAIN, rip=123.123.123.123, lip=321.321.321.321, mpid=123, TLS, session=<...> Note the TLS.