Unverified50% confidenceFactExact time
STARTTLS has an opportunistic encryption problem: a man-in-the-middle stripping the STARTTLS directive causes communication to silently downgrade to plaintext transmission.
1
Sources
50%
Confidence
Long-term
Relevance
9/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSTARTTLS is opportunistic encryption that falls back to plaintext transmission if the peer server does not support it; MTA-STS and DANE attempt to address downgrade attacks but have limited adoption rates.79% similarUnverifiedCompared to TLS 1.2, TLS 1.3 simplifies the handshake process (reducing from 2-RTT to 1-RTT), removes insecure cipher suites, and enables forward secrecy by default68% similarUnverifiedWeChat Mini Programs mandatorily require the use of HTTPS encrypted communication.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/859119API
curl https://kongchang.com/api/v1/knowledge/claims/859119MCP
get_claim(id=859119)