> Anyway, even if email security cannot be perfect, I agree with the sentiment behind RFC 7435[2] - some protection is better than nothing. Opportunistic encry

> Anyway, even if email security cannot be perfect, I agree with the sentiment behind RFC 7435[2] - some protection is better than nothing. Opportunistic encryption (or any kind of negotiable security) is prone to downgrades by a MITM. Either both sides require strong security, or you must assume lowest common denominator. While I have your attention, please do yourself a favor and pin some strong, modern ciphers for your SSH client: https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern