5 ms·
SMTP with TLS doesn't leak any metadata except the connecting IP address. And with DMARC you can mandate it. Calls for whole new protocols for email are usuall
by baudehlo 11y ago
SMTP with TLS doesn't leak any metadata except the connecting IP address. And with DMARC you can mandate it.
Calls for whole new protocols for email are usually made by people who don't understand the email ecosystem as it currently stands.
- function_seven 11y agoCan the TLS be enforced by the sender all the way through the chain to the destination mailbox?
- evook 11y agoYes, as well as PGP or S/MIME. It just depends or your relay configuration. We've implemented it switch able. We've customers that are bouncing non PGP encrypted E-Mails.
- Arnt 11y agoThe sender (the sender's service provider or organization) decides when to use TLS while the message bounces around internally, then (this is the typical long hop) the recipient's server and the sender's SMTP client negotiate, and then the recipient gets to decide. The sender may have opinions, but as soon as the message is handed over to the recipient's server, that's it. That's the end of the sender's influence, and that's how it has to be on a global internet. People can connect without having their infrastructure approved by anyone else.
- gnaritas 11y agoNo, it can't. The receiver could be using a non secure SMTP server.
- cbhl 11y agoBut SMTP with TLS is opportunistic -- and if we're talking "national state secrets" it's trivial for a state to MITM the connection and do a TLS downgrade attack.
- Spooky23 11y agoIf you actually care about the data, it does nothing. It only guarantees that the front door is encrypted. With the number of cloud anti spam and archive companies out there, you have no idea what happens between those providers and the mail servers.