diff --git a/internal/email/email.go b/internal/email/email.go
index ac215be6..de170e0c 100644
--- a/internal/email/email.go
+++ b/internal/email/email.go
@@ -46,7 +46,9 @@ func New(
 		mailer.LocalName = config.SMTPLocalName
 	}
 	if config.SMTPSkipTLSVerification {
-		mailer.TLSConfig = &tls.Config{InsecureSkipVerify: true}
+		mailer.TLSConfig = &tls.Config{InsecureSkipVerify: true} //nolint:gosec // explicit opt-in for dev/testing
+	} else {
+		mailer.TLSConfig = &tls.Config{ServerName: config.SMTPHost}
 	}
 	return &provider{
 		config: config,