Loading

Salesforce Mail Delivery: Supported TLS 1.2 Cipher Suites for Email Transfer Agent (MTA) Connections

Udgivelsesdato: Jun 28, 2026
Beskrivelse

When Salesforce delivers or receives email through its Mail Transfer Agent (MTA), the connection uses Transport Layer Security (TLS) to encrypt the transmission. Specifically, Salesforce uses TLS version 1.2 for mail delivery.
This article lists the TLS cipher suites supported by Salesforce's MTA when establishing a TLS-encrypted email connection. A TLS cipher suite is a combination of cryptographic algorithms used to secure a network connection — it defines the key exchange, authentication, encryption, and message authentication code (MAC) methods used during the TLS handshake.

Administrators and email security teams can reference this list when configuring inbound or outbound mail filtering rules, firewall policies, or third-party email gateways that connect to Salesforce's mail infrastructure.

Løsning

The following TLS 1.2 cipher suites are supported by the Salesforce Mail Transfer Agent (MTA) for email delivery and receipt:
Cipher Suites Using ECDHE Key Exchange

  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384
  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-SHA
  • ECDHE-RSA-AES256-SHA
  • ECDHE-ECDSA-AES128-SHA
  • ECDHE-RSA-AES128-SHA

Cipher Suites Using AES Without ECDHE

  • AES256-GCM-SHA384
  • AES128-GCM-SHA256
  • AES256-SHA256
  • AES128-SHA256
  • AES256-SHA
  • AES128-SHA

Cipher Suites Using DHE Key Exchange

  • DHE-RSA-AES256-GCM-SHA384
  • DHE-RSA-AES128-GCM-SHA256
  • DHE-RSA-AES256-SHA256
  • DHE-RSA-AES128-SHA256
  • DHE-RSA-AES256-SHA
  • DHE-RSA-AES128-SHA

Key Terms:

  • ECDHE = Elliptic Curve Diffie-Hellman Ephemeral (key exchange algorithm)
  • DHE = Diffie-Hellman Ephemeral (key exchange algorithm)
  • AES = Advanced Encryption Standard (symmetric encryption)
  • GCM = Galois/Counter Mode (encryption mode providing both confidentiality and data integrity)
  • SHA = Secure Hash Algorithm (used for message authentication)
  • MTA = Mail Transfer Agent (the Salesforce email server that sends and receives email)
  • TLS = Transport Layer Security (the protocol used to encrypt email in transit)
Vidensartikelnummer

000383092

 
Indlæser
Salesforce Help | Article