Loading
Feature degradation | Gmail Email delivery failureRead More
Sales Productivity
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Set Up Transaction Layer Security (TLS)

            You are here:

            1. Salesforce Help
            2. Docs
            3. Seller Productivity

            Set Up Transaction Layer Security (TLS)

            Transaction Layer Security (TLS) encrypts the contents of an email transaction during transmission. The sender and receiver can also use it to verify each other's identity. You can choose a TLS setting when sending email through Salesforce or through an email relay.

            Required Editions

            Available in: Salesforce Classic and Lightning Experience
            Available in: all editions except Database.com
            User Permissions Needed
            To configure email deliverability: Customize Application
            Note
            Note Salesforce no longer supports TLS versions 1.1 or 1.0. If the receiving mail server only supports TLS 1.1 or 1.0 ciphers, then the email is sent unencrypted unless the sending org has specified that TLS is required.
            1. From Setup, enter Deliverability in the Quick Find box, and then select Deliverability.
            2. In the Transport Layer Security (TLS) (Emails from Salesforce or Email Relay Only) section, select your TLS Setting:
              • Preferred—If the message transfer agent (MTA) advertises TLS and a common cipher can be negotiated, TLS is used. If TLS can’t be negotiated, the email is delivered unencrypted. This setting is the default.
              • Required—If TLS can’t be negotiated or a common cipher can’t be agreed on, the email bounces back to the originator.
              • Preferred Verify—If the MTA advertises TLS, a common cipher can be negotiated, and Salesforce can verify the receiver, TLS is used. Verification means that a valid certificate authority has signed the receiver’s certificate and the hostname in the certificate matches the host to which we connected. If TLS can’t be negotiated or the verification fails, the email is delivered unencrypted.
              • Required Verify—If TLS can’t be negotiated, a common cipher can’t be agreed on, or the sender can’t be verified, the email bounces back to the originator. Verification means that a valid certificate authority has signed the receiver’s certificate and the hostname in the certificate matches the host to which we connected.
            3. Optionally, if you selected a setting other than Preferred, you can select Restrict TLS to these domains and enter the comma-separated list of domains. When delivering to domains that aren’t listed, we use the "Preferred" setting.
            4. Click Save.
             
            Loading
            Salesforce Help | Article