Enforce TLS SSL emails

[DieterJ]

Is there a way to enforce encryption when sending emails, i.e. welcome mails ?

I know there is a button to enable SSL/TLS in the email settings, but this does enable only "opportunistic" TLS. I just verified that.

So if a man-in-the-middle fakes a email server and requests a downgrade to "plain", then the 3cx server will send mails as plain text. Incl. login credentials and QR codes.

Thanks
Dieter

 

[roland_3CX]

Hi Dieter,
Thank you for reporting this. We shall further look into this matter .