Must finish the STARTTLS command - especially what happens when it fails.
A quick TODO list follows.
- Upon success, will there be any response other than initiation of TLS/SSL communication?
- Upon failure, should probably differentiate between types of failure.
- Should the protocol restrict use of SSL1/2, as they are insecure?
To answer and/or comment upon all three bullets above...
- Yes, upon success there will be a positive single-line response from the server to indicate successful initiation of the TLS connection.
- The different types of failure will be implementation dependent (in other words, it's up to the server author how to implement error handling).
- The protocol will use TLS, not SSL, so this won't be an issue. - dave
Issue done.