MTA-STS
A mechanism that publishes a mail transport security policy via HTTPS and enforces the use of TLS by sending parties. It is used to mitigate the downgrade attack risk of STARTTLS.
Timeline (last 90 days)
MTA-STS publishes a policy statement via HTTPS that forces senders to use TLS; DANE uses DNSSEC to bind certificate information to domain records, compensating for STARTTLS's downgrade attack risk.
The IETF published the MTA-STS standard (RFC 8461) in 2018 to address STARTTLS downgrade attacks.
All Facts (2)
MTA-STS publishes a policy statement via HTTPS that forces senders to use TLS; DANE uses DNSSEC to bind certificate information to domain records, compensating for STARTTLS's downgrade attack risk.
50%UnverifiedThe IETF published the MTA-STS standard (RFC 8461) in 2018 to address STARTTLS downgrade attacks.
50%