Secure Sockets Layer (SSL) 'STARTTLS' Server Detection

info Nessus Network Monitor Plugin ID 9132

Synopsis

The remote server has accepted a 'STARTTLS' connection request.

Description

This server has recently accepted a 'STARTTLS' encryption request. 'STARTTLS' is an extension to plain text communication protocols, which offers a way to upgrade a plain text connection to an encrypted (TLS or SSL) connection instead of using a separate port for encrypted communication.

Solution

Ensure that such behavior is in alignment with corporate policies and guidelines.

See Also

http://en.wikipedia.org/wiki/STARTTLS

Plugin Details

Severity: Info

ID: 9132

Family: Generic

Published: 3/9/2016

Updated: 11/23/2016