diff --git a/modules/core-module/src/main/java/org/simplejavamail/api/mailer/MailerGenericBuilder.java b/modules/core-module/src/main/java/org/simplejavamail/api/mailer/MailerGenericBuilder.java index f91c96f3..35c729b4 100644 --- a/modules/core-module/src/main/java/org/simplejavamail/api/mailer/MailerGenericBuilder.java +++ b/modules/core-module/src/main/java/org/simplejavamail/api/mailer/MailerGenericBuilder.java @@ -441,7 +441,8 @@ public interface MailerGenericBuilder> { T trustingAllHosts(boolean trustAllHosts); /** - * Configures the current session to not verify the server's identity on an SSL connection. Defaults to true. + * Configures the current session to not verify the server's identity on an SSL connection. Defaults to true, even for SMTP which makes sense since + * opportunistic TLS is also enabled by default (also see {@link TransportStrategy#setOpportunisticTLS(Boolean)}). *

* Note that this is not the same as {@link #trustingAllHosts(boolean)} or {@link #trustingSSLHosts(String...)}.
* It would be prudent to have at least one of these features turned on, lest you be vulnerable to man-in-the-middle attacks.