Skip to content

Commit

Permalink
#495: minot javadoc tweak to clarify default for SMTP strategy [skip ci]
Browse files Browse the repository at this point in the history
  • Loading branch information
bbottema committed Apr 10, 2024
1 parent 4e64660 commit b36ce41
Showing 1 changed file with 2 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -441,7 +441,8 @@ public interface MailerGenericBuilder<T extends MailerGenericBuilder<?>> {
T trustingAllHosts(boolean trustAllHosts);

/**
* Configures the current session to not verify the server's identity on an SSL connection. Defaults to true.
* Configures the current session to not verify the server's identity on an SSL connection. Defaults to true, even for SMTP which makes sense since
* opportunistic TLS is also enabled by default (also see {@link TransportStrategy#setOpportunisticTLS(Boolean)}).
* <p>
* Note that this is <em>not</em> the same as {@link #trustingAllHosts(boolean)} or {@link #trustingSSLHosts(String...)}.<br>
* It would be prudent to have at least one of these features turned on, lest you be vulnerable to man-in-the-middle attacks.
Expand Down

0 comments on commit b36ce41

Please sign in to comment.