Loading
메일 전송 도메인 확인 상태 안내더 많이 읽기

Salesforce Mail Delivery: Supported TLS 1.2 Cipher Suites for Email Transfer Agent (MTA) Connections

게시 일자: Jun 28, 2026
상세 설명

When Salesforce delivers or receives email through its Mail Transfer Agent (MTA), the connection uses Transport Layer Security (TLS) to encrypt the transmission. Specifically, Salesforce uses TLS version 1.2 for mail delivery.
This article lists the TLS cipher suites supported by Salesforce's MTA when establishing a TLS-encrypted email connection. A TLS cipher suite is a combination of cryptographic algorithms used to secure a network connection — it defines the key exchange, authentication, encryption, and message authentication code (MAC) methods used during the TLS handshake.

Administrators and email security teams can reference this list when configuring inbound or outbound mail filtering rules, firewall policies, or third-party email gateways that connect to Salesforce's mail infrastructure.

솔루션

The following TLS 1.2 cipher suites are supported by the Salesforce Mail Transfer Agent (MTA) for email delivery and receipt:
Cipher Suites Using ECDHE Key Exchange

  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384
  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-SHA
  • ECDHE-RSA-AES256-SHA
  • ECDHE-ECDSA-AES128-SHA
  • ECDHE-RSA-AES128-SHA

Cipher Suites Using AES Without ECDHE

  • AES256-GCM-SHA384
  • AES128-GCM-SHA256
  • AES256-SHA256
  • AES128-SHA256
  • AES256-SHA
  • AES128-SHA

Cipher Suites Using DHE Key Exchange

  • DHE-RSA-AES256-GCM-SHA384
  • DHE-RSA-AES128-GCM-SHA256
  • DHE-RSA-AES256-SHA256
  • DHE-RSA-AES128-SHA256
  • DHE-RSA-AES256-SHA
  • DHE-RSA-AES128-SHA

Key Terms:

  • ECDHE = Elliptic Curve Diffie-Hellman Ephemeral (key exchange algorithm)
  • DHE = Diffie-Hellman Ephemeral (key exchange algorithm)
  • AES = Advanced Encryption Standard (symmetric encryption)
  • GCM = Galois/Counter Mode (encryption mode providing both confidentiality and data integrity)
  • SHA = Secure Hash Algorithm (used for message authentication)
  • MTA = Mail Transfer Agent (the Salesforce email server that sends and receives email)
  • TLS = Transport Layer Security (the protocol used to encrypt email in transit)
Knowledge 기사 번호

000383092

 
로드 중
Salesforce Help | Article