# SSL/TLS for port 465 (Net::ReadTimeout) - undocumented solution **URL:** \ **Category:** Self-hosting\ **Tags:** email\ **Created:** [July 5, 2023, 11:20am UTC](https://meta.discourse.org/t/ssl-tls-for-port-465-net-readtimeout-undocumented-solution/270632 "2023-07-05T11:20:23Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![niccokunzmann](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/niccokunzmann/32/131771_2.png) [@niccokunzmann](https://meta.discourse.org/u/niccokunzmann)\ **Post date:** [July 5, 2023, 11:20am UTC](https://meta.discourse.org/t/ssl-tls-for-port-465-net-readtimeout-undocumented-solution/270632/1 "2023-07-05T11:20:23Z")
I was trying to setup email with a cpanel server. I failed for several hours. This did the trick in `app.yml`: > [@Cannot send email - problem with port 465](https://meta.discourse.org/t/cannot-send-email-problem-with-port-465/246004/9): > > Well, if @schungx is able to confirm that DISCOURSE\_SMTP\_FORCE\_TLS=true is indeed a solution, we can add that. ```plaintext DISCOURSE_SMTP_FORCE_TLS: true ``` As a new admin, I wonder about this setting: ```plaintext DISCOURSE_SMTP_ENABLE_START_TLS: true ``` What is the difference? Why does one work and the other does not? And if that is so: Why would the ` DISCOURSE_SMTP_FORCE_TLS` not be there, too? It looks like Thunderbird (E-Mail client) shows these three options: `no encryption`, `STARTTLS` and `SSL/TLS`. So, I wondered if `DISCOURSE_SMTP_FORCE_TLS` implies `SSL/TLS`, if that could be in the template. Or maybe not? How is it with documenting these options? Would that be alright? Is there a policy of “keeping templates small”? E.g. I was a bit confused by `DISCOURSE_SMTP_ADDRESS` and `DISCOURSE_SMTP_DOMAIN` as e.g. the `curl` to send emails does not need `DISCOURSE_SMTP_DOMAIN` as a parameter. --- _[View the full topic](https://meta.discourse.org/t/ssl-tls-for-port-465-net-readtimeout-undocumented-solution/270632)._