At least for SMTP: TLS: Forced TLS connection from the start. Port: 465. STARTTLS: Starts off with an unencrypted connection and upgrades to TLS right after. Port: 587. Usually preferred to TLS.