电子邮件安全：TLS 和 S/MIME
我的理解是，TLS 是一种加密技术，允许两个 STMP 服务器安全地相互通信。如果使用 HTTPS 连接到 STMP 服务器，与使用 S/MIME 相同吗？
My understanding is that TLS is an encryption technique that allowing two STMP servers to communicate with each other securely. If HTTPS is used to connect to an STMP serve is that the same as using S/MIME?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
不会。TLS 会对通信通道进行加密。 S/MIME 对消息进行加密。也就是说，这就是“在安全线路上公开交谈”和“在不安全线路上用代码交谈”之间的区别。
No. TLS encrypts the communication channel. S/MIME encrypts the message. I.e., it's the difference between "talking openly on a secure line" and "talking in code on an insecure line."
对于 HTTPS 和 SMTP 的含义似乎存在误解。 HTTP 和 SMTP 是两种不同的协议。 HTTPS 本质上是基于 SSL/TLS 的 HTTP，它保护客户端和服务器之间的通信。同样，可以使用 SSL/TLS 保护 SMTP 客户端和 SMTP 服务器之间的通信（有两种变体：在特定端口上直接通过 SSL/TLS 的 SMTP，或者通过 STARTTLS 内的 STARTTLS 启动 TLS）。 SMTP 协议；无论哪种方式，HTTPS 都不用于连接到 SMTP 服务器）。在这两种情况下，这都是传输级安全性。
相比之下，S/MIME 涉及消息级安全性，其中消息被加密（即使它们已被接收并位于收件箱中）。
与 SSL/TLS（用于 HTTP、SMTP 等）和 S/MIME 相关的是证书和 PKI（公钥基础设施）的概念，这有助于做出有关远程方信任的决策，安全所必需的。
There seems to be a misunderstanding regarding what HTTPS and SMTP are. HTTP and SMTP are two distinct protocols. HTTPS is essentially HTTP over SSL/TLS, which secures the communication between the client and the server. Similarly, communications between an SMTP client and an SMTP server can be secured using SSL/TLS (there are two variants: SMTP over SSL/TLS directly, on a specific port, or TLS initiated via
STARTTLSwithin the SMTP protocol; either way, HTTPS isn't used to connect to an SMTP server). In both cases, this is transport-level security.In contrast, S/MIME is about message-level security, where the messages are encrypted (even when they've been received and are sitting in your inbox).
What can be relevant to both SSL/TLS (for HTTP, SMTP, ...) and S/MIME is the notion of certificates and PKI (Public Key Infrastructure), which is what helps make decision regarding the trust in the remote party, necessary for security.