More STARTTLS Protocols

square / certigo

A utility to examine and validate certificates in a variety of formats

Apache License 2.0

935 stars 71 forks source link

More STARTTLS Protocols #120

Open mcpherrinm opened 7 years ago

mcpherrinm commented 7 years ago

Here's a list of STARTTLS type protocols I've found:

[x] MySQL
[x] PostgreSQL
[x] LDAP
[x] SMTP
[x] IMAP
[ ] POP3 (Uncommon, normal TLS usually used)
[ ] IRC (Uncommon, normal TLS usually used)
[x] FTP
[ ] TELNET
[ ] XMPP
[ ] NNTP
[ ] RDP implied some sort of negotiation on https://technet.microsoft.com/en-us/library/ff458357.aspx

Many of these are simple text protocols, and we can probably get away with a very simple client that talks just enough to get to the STARTTLS.

csstaub commented 7 years ago

Neat. Sidenote that FTPS can be implicit/explicit. Also some servers do weird nonsense like using the same TLS session across both control/data TCP connections.

rgl commented 4 years ago

Also consider SQL Server, I've opened an issue at #223 :-)