TLS login credential encryption

Products

• CA Service Desk Manager
• CA Service Management - Service Desk Manager

Issue/Introduction

TLS negotiates the connection with the email server in plain text.  Are my login credentials being sent unencrypted?

Environment

All releases of Service Desk Manager

Resolution

We do not transmit mail server credentials in plaintext.  We first send a HELLO packet to the mail server over plain connection and then do “STARTTLS” to enhance the protocol to a more secure version. Only if this step succeeds, we do a login call.