Skip to content

Require TLS for sending form submission via SES#2094

Draft
theseanything wants to merge 1 commit intomainfrom
theseanything/require-tls
Draft

Require TLS for sending form submission via SES#2094
theseanything wants to merge 1 commit intomainfrom
theseanything/require-tls

Conversation

@theseanything
Copy link
Copy Markdown
Contributor

This means that all form submission sent by email will require the to use TLS to send the email from SES to the recipent mailbox. This prevent the connection to be downgraded and the submission to sent over plaintext.

This means that all form submission sent by email will require the to use TLS to send the email from SES to the recipent mailbox. This prevent the connection to be downgraded and the submission to sent over plaintext.
Copilot AI review requested due to automatic review settings April 21, 2026 15:26
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the SES configuration for form submission emails to require TLS for outbound delivery, preventing plaintext delivery if a downgrade occurs.

Changes:

  • Add delivery_options { tls_policy = "REQUIRE" } to the form_submissions SESv2 configuration set.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@theseanything theseanything marked this pull request as draft April 24, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants