3 ms·
For organizations that subscribe to these cloud services (like Google Apps, or hosted Exchange) there are settings to enforce the use of TLS on both inbound and
by thrownaway2424 11y ago
For organizations that subscribe to these cloud services (like Google Apps, or hosted Exchange) there are settings to enforce the use of TLS on both inbound and outbound. For example https://support.google.com/a/answer/2520500 https://support.google.com/a/answer/2520500
- capt_hotpants 11y agoIf you read the fine print in bullet #8, you'll discover that there is, per default, no validation of the presented certificate at all. Without proper certificate validation, the encryption step is cryptographically worthless. Anyone can MITM the traffic just by presenting a random certificate to the sender.