That got me thinking. I tested again on CheckTLS.com and if you use the port 465 and direct TLS, everything is fine. If you use port 587 and use STARTTLS, it's all good too.
Our decision was to not use STARTTLS for port 25, but that's maybe not a good idea and we should allow it back: this would make both services happier ;)
In a nutshell: TLS via 465 works correctly, and STARTTLS via 587 too.
Don't hesitate if you want to weight on this, happy to discuss this further!
Our decision was to not use STARTTLS for port 25, but that's maybe not a good idea and we should allow it back: this would make both services happier ;)
In a nutshell: TLS via 465 works correctly, and STARTTLS via 587 too.
Don't hesitate if you want to weight on this, happy to discuss this further!