{"id":7701,"date":"2025-04-07T14:46:16","date_gmt":"2025-04-07T14:46:16","guid":{"rendered":"https:\/\/www.turkticaret.net\/blog\/?p=7701"},"modified":"2025-04-07T14:47:53","modified_gmt":"2025-04-07T14:47:53","slug":"mta-sts-nedir-ne-ise-yarar-adim-adim-rehber","status":"publish","type":"post","link":"https:\/\/www.turkticaret.net\/blog\/mta-sts-nedir-ne-ise-yarar-adim-adim-rehber\/","title":{"rendered":"MTA-STS Nedir, Ne \u0130\u015fe Yarar? Ad\u0131m Ad\u0131m Rehber"},"content":{"rendered":"

E-posta, i\u015f d\u00fcnyas\u0131nda ve g\u00fcnl\u00fck ileti\u015fimde h\u00e2l\u00e2 en yayg\u0131n kullan\u0131lan dijital ara\u00e7lardan biri. Ancak y\u0131llard\u0131r bu sistemin en zay\u0131f halkalar\u0131ndan biri de g\u00fcvenlik konusu. Her g\u00fcn milyonlarca e-posta, g\u00f6nderici ile al\u0131c\u0131 aras\u0131nda \u00e7e\u015fitli sunucular \u00fczerinden dola\u015f\u0131rken; araya giren k\u00f6t\u00fc niyetli ki\u015filer, sald\u0131rgan yaz\u0131l\u0131mlar ya da y\u00f6nlendirme hatalar\u0131 nedeniyle veri s\u0131z\u0131nt\u0131s\u0131 ya\u015fanabiliyor.Tam da bu noktada MTA-STS<\/strong> (Mail Transfer Agent Strict Transport Security) ad\u0131 verilen yeni nesil bir e-posta g\u00fcvenlik protokol\u00fc devreye giriyor. Peki MTA-STS nedir, ne i\u015fe yarar, kimler kullanmal\u0131 ve nas\u0131l \u00e7al\u0131\u015f\u0131r? Hepsini bu rehber yaz\u0131m\u0131zda ad\u0131m ad\u0131m ele ald\u0131k.<\/p>\n

\"MTA-STS<\/p>\n

MTA-STS Nedir?<\/h2>\n

MTA-STS, yani \u201cMail Transfer Agent – Strict Transport Security\u201d, e-posta sunucular\u0131 aras\u0131nda iletilen maillerin g\u00fcvenli bir \u015fekilde aktar\u0131lmas\u0131n\u0131 sa\u011flayan bir g\u00fcvenlik protokol\u00fcd\u00fcr. SMTP protokol\u00fc \u00fczerinden \u00e7al\u0131\u015fan bu yap\u0131, iletilerin TLS (Transport Layer Security)<\/strong> \u015fifrelemesi ile korunarak iletilmesini zorunlu hale getirir. SMTP protokol\u00fc varsay\u0131lan olarak \u015fifrelemeyi zorunlu k\u0131lmaz; yani bir e-posta g\u00f6nderilirken araya giren bir sald\u0131rgan, verileri \u015fifrelenmemi\u015f \u015fekilde ele ge\u00e7irebilir. MTA-STS ise e-posta g\u00f6nderen sunucuya \u201cBen TLS \u015fifreleme destekliyorum ve \u015fifreleme olmadan mail kabul etmem\u201d mesaj\u0131 verir. B\u00f6ylece ileti\u015fim daha g\u00fcvenli h\u00e2le gelir.<\/p>\n

Neden MTA-STS\u2019ye \u0130htiya\u00e7 Var?<\/h2>\n

Geleneksel SMTP protokol\u00fc, y\u0131llar \u00f6nce tasarland\u0131\u011f\u0131 i\u00e7in g\u00fcn\u00fcm\u00fcz\u00fcn siber tehditlerine kar\u015f\u0131 yeterli de\u011fil. \u00d6zellikle \u015fu iki b\u00fcy\u00fck sorunu adresleyemiyor:<\/p>\n

    \n
  1. \n

    STARTTLS Downgrade Sald\u0131r\u0131lar\u0131:<\/strong> STARTTLS, SMTP protokol\u00fcne sonradan eklenen bir g\u00fcvenlik \u00f6zelli\u011fidir. Ancak bu yap\u0131 k\u00f6t\u00fc niyetli ki\u015filer taraf\u0131ndan devre d\u0131\u015f\u0131 b\u0131rak\u0131labilir. Sald\u0131rgan, sunucular aras\u0131ndaki ba\u011flant\u0131ya m\u00fcdahale ederek \u015fifrelemeyi d\u00fc\u015f\u00fcrebilir ve verileri d\u00fcz metin olarak okuyabilir.<\/p>\n<\/li>\n

  2. \n

    Alan Ad\u0131 Sahtecili\u011fi ve Kimlik Av\u0131 (Phishing):<\/strong> E\u011fer bir e-posta al\u0131c\u0131s\u0131, gelen iletinin ger\u00e7ekten kimden geldi\u011fini do\u011frulayamazsa, sald\u0131rganlar sahte domainler kullanarak kimlik av\u0131 yapabilir.<\/p>\n<\/li>\n<\/ol>\n

    MTA-STS bu iki problemi ayn\u0131 anda \u00e7\u00f6zmeyi ama\u00e7lar: Birincisi, TLS \u015fifrelemesini zorunlu h\u00e2le getirerek downgrade sald\u0131r\u0131lar\u0131n\u0131 engeller. \u0130kincisi ise kimlik do\u011frulama ile sahte sunuculardan gelen iletileri reddeder.<\/p>\n

    \"MTA-STS<\/p>\n

    MTA-STS Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/strong><\/h3>\n

    MTA-STS, DNS kay\u0131tlar\u0131 ve HTTPS \u00fczerinden sunulan bir “politikay\u0131” temel al\u0131r. Bu politika, e-posta sunucular\u0131n\u0131n TLS kullan\u0131m\u0131n\u0131 nas\u0131l uygulad\u0131\u011f\u0131n\u0131 tan\u0131mlar. \u0130\u015fte s\u00fcre\u00e7 ad\u0131m ad\u0131m \u015f\u00f6yle i\u015fler:<\/p>\n

      \n
    1. \n

      DNS \u00dczerinden Ke\u015fif:<\/strong> E-posta g\u00f6nderen sunucu, al\u0131c\u0131 domain\u2019in MTA-STS deste\u011fi olup olmad\u0131\u011f\u0131n\u0131 DNS \u00fczerinden kontrol eder. \u00d6rne\u011fin:
      _mta-sts.ornekdomain.com<\/code> gibi bir kay\u0131t aran\u0131r.<\/p>\n<\/li>\n

    2. \n

      Politikan\u0131n \u0130ndirilmesi:<\/strong> E\u011fer destekleniyorsa, g\u00f6nderici sunucu, HTTPS protokol\u00fc \u00fczerinden al\u0131c\u0131 domain\u2019e ait MTA-STS politikas\u0131n\u0131 indirir.<\/p>\n<\/li>\n

    3. \n

      TLS Zorunlulu\u011fu:<\/strong> Politika dosyas\u0131ndaki kurallara g\u00f6re, al\u0131c\u0131 sunucuya TLS ba\u011flant\u0131s\u0131 kurulmadan e-posta iletimi yap\u0131lmaz. E\u011fer g\u00fcvenli ba\u011flant\u0131 kurulamazsa, ileti reddedilir veya s\u0131raya al\u0131n\u0131r.<\/p>\n<\/li>\n<\/ol>\n

      MTA-STS\u2019nin Sa\u011flad\u0131\u011f\u0131 Faydalar<\/strong><\/h3>\n