5223 SSL vs 5222 encrypted

Fairly noobish person here trying to set up Openfire server, and I’m wondering about the difference between “old” SSL on port 5223 vs encrypted chat on port 5222.

Should I keep 5223 closed and disable SSL? Is encrypted chat better? Because I notice that all chat on 5223 is SSL, but chat on 5222 could be encrypted or not encrypted. So am I better off keeping 5222 closed and only allowing SSL chat?

Can I disable the SSL port and then make it so all chat on the regular port is encrypted; and unencrypted chat is not possible?

confused

thanks

You can disable port 5223 - it was mentioned in https://tools.ietf.org/html/rfc3920 which was replaced by https://tools.ietf.org/html/rfc6120.

You can still force that the clients use encryption / TLS (Server Settings / Security Settings).

1 Like