threads / patch / 64028

patchdocs: update sendmail docs to use more secure SMTP server for Gmail

Subject: [PATCH] docs: update sendmail docs to use more secure SMTP server for Gmail

## tl;dr

4 messages between Aug 25, 2025 and Aug 26, 2025. Diffs are folded; open one to read it.

replies: 3people: 2as markdown or json

Aditya Garg· Aug 25, 2025, 06:55 UTC · lore

Gmail's SMTP server also has a port 465 with SSL/TLS encryption. It is more secure than port 587 with STARTTLS encryption. Update the docs to reflect this change.

Signed-off-by: Aditya Garg <gargaditya08@live.com>
---
 Documentation/git-send-email.adoc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

Show changes to Documentation/git-send-email.adoc +4 −4

diff --git a/Documentation/git-send-email.adoc b/Documentation/git-send-email.adoc
index 5335502d68..c610909a92 100644
--- a/Documentation/git-send-email.adoc
+++ b/Documentation/git-send-email.adoc
@@ -521,10 +521,10 @@ edit `~/.gitconfig` to specify your account settings:
 
 ----
 [sendemail]
-	smtpEncryption = tls
+	smtpEncryption = ssl
 	smtpServer = smtp.gmail.com
 	smtpUser = yourname@gmail.com
-	smtpServerPort = 587
+	smtpServerPort = 465
 ----
 
 Gmail does not allow using your regular password for `git send-email`.
@@ -542,10 +542,10 @@ if you want to use `OAUTHBEARER`, edit your `~/.gitconfig` file and add
 
 ----
 [sendemail]
-	smtpEncryption = tls
+	smtpEncryption = ssl
 	smtpServer = smtp.gmail.com
 	smtpUser = yourname@gmail.com
-	smtpServerPort = 587
+	smtpServerPort = 465
 	smtpAuth = OAUTHBEARER
 ----

-- 
2.51.0

Junio C Hamano· Aug 26, 2025, 14:51 UTC · re: Aditya Garg · lore

Re: [PATCH] docs: update sendmail docs to use more secure SMTP server for Gmail

Aditya Garg <gargaditya08@live.com> writes:

> Gmail's SMTP server also has a port 465 with SSL/TLS encryption. It is
> more secure than port 587 with STARTTLS encryption. Update the docs to
> reflect this change.

"Update the docs to reflect this change"? When there is no change other than the changes this patch is making to the documentation, that is a very strange thing to say.

I would have explained it this way instead, perhaps.

    Earlier recommendation by IETF with RFC 2595 was to deprecate
    implicit TLS in preference for upgrade an initially unencrypted
    connection with STARTTLS command.  These days, however, IETF
    recommends that connections be made using "Implicit TLS", in
    preference to STARTTLS and the like, completely reversing their
    earlier position, in RFC8314.

    Update the GMail example to use the implicit TLS to match the
    current recommendation at port 465.

Show 34 quoted lines

> Signed-off-by: Aditya Garg <gargaditya08@live.com>
> ---
>  Documentation/git-send-email.adoc | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/Documentation/git-send-email.adoc b/Documentation/git-send-email.adoc
> index 5335502d68..c610909a92 100644
> --- a/Documentation/git-send-email.adoc
> +++ b/Documentation/git-send-email.adoc
> @@ -521,10 +521,10 @@ edit `~/.gitconfig` to specify your account settings:
>  
>  ----
>  [sendemail]
> -	smtpEncryption = tls
> +	smtpEncryption = ssl
>  	smtpServer = smtp.gmail.com
>  	smtpUser = yourname@gmail.com
> -	smtpServerPort = 587
> +	smtpServerPort = 465
>  ----
>  
>  Gmail does not allow using your regular password for `git send-email`.
> @@ -542,10 +542,10 @@ if you want to use `OAUTHBEARER`, edit your `~/.gitconfig` file and add
>  
>  ----
>  [sendemail]
> -	smtpEncryption = tls
> +	smtpEncryption = ssl
>  	smtpServer = smtp.gmail.com
>  	smtpUser = yourname@gmail.com
> -	smtpServerPort = 587
> +	smtpServerPort = 465
>  	smtpAuth = OAUTHBEARER
>  ----

Aditya Garg· Aug 26, 2025, 15:07 UTC · re: Junio C Hamano · lore

Re: [PATCH] docs: update sendmail docs to use more secure SMTP server for Gmail

On 26/08/25 8:21 pm, Junio C Hamano wrote:

Show 9 quoted lines

>     Earlier recommendation by IETF with RFC 2595 was to deprecate
>     implicit TLS in preference for upgrade an initially unencrypted
>     connection with STARTTLS command.  These days, however, IETF
>     recommends that connections be made using "Implicit TLS", in
>     preference to STARTTLS and the like, completely reversing their
>     earlier position, in RFC8314.
> 
>     Update the GMail example to use the implicit TLS to match the
>     current recommendation at port 465.

Fixed in v2

Aditya Garg· Aug 26, 2025, 15:09 UTC · re: Aditya Garg · lore

[PATCH v2] docs: update sendmail docs to use more secure SMTP server for Gmail

Earlier recommendation by IETF with RFC 2595 was to deprecate implicit TLS in preference for upgrade an initially unencrypted connection with STARTTLS command. These days, however, IETF recommends that connections be made using "Implicit TLS", in preference to STARTTLS and the like, completely reversing their earlier position, in RFC8314.

Update the GMail example to use the implicit TLS to match the current recommendation at port 465.

Signed-off-by: Aditya Garg <gargaditya08@live.com>
---
 Documentation/git-send-email.adoc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

Show changes to Documentation/git-send-email.adoc +4 −5

diff --git a/Documentation/git-send-email.adoc b/Documentation/git-send-email.adoc
index daddaae36d..8aa54e36e7 100644
--- a/Documentation/git-send-email.adoc
+++ b/Documentation/git-send-email.adoc
@@ -565,10 +565,10 @@ edit `~/.gitconfig` to specify your account settings:
 
 ----
 [sendemail]
-	smtpEncryption = tls
+	smtpEncryption = ssl
 	smtpServer = smtp.gmail.com
 	smtpUser = yourname@gmail.com
-	smtpServerPort = 587
+	smtpServerPort = 465
 ----
 
 Gmail does not allow using your regular password for `git send-email`.
@@ -586,10 +586,10 @@ if you want to use `OAUTHBEARER`, edit your `~/.gitconfig` file and add
 
 ----
 [sendemail]
-	smtpEncryption = tls
+	smtpEncryption = ssl
 	smtpServer = smtp.gmail.com
 	smtpUser = yourname@gmail.com
-	smtpServerPort = 587
+	smtpServerPort = 465
 	smtpAuth = OAUTHBEARER
 ----
 

Range-diff against v1:
-:  ---------- > 1:  6b73d4bb6c docs: update sendmail docs to use more secure SMTP server for Gmail

-- 
2.51.0