3 ms·
In general, you can't control how an email will travel from the original sender's system to your own, or from your own to its final recipient. Such is the natur
by Silhouette 9y ago
In general, you can't control how an email will travel from the original sender's system to your own, or from your own to its final recipient. Such is the nature of SMTP. A lot of modern email systems will be encrypting their connections on various hops, but it's not something you can guarantee for mail that leaves your own organisation, and even if all of the hops were encrypting the data in motion, there are still plenty of vulnerabilities while the data is at rest anywhere along the way.
In short, banks sending out PDF statements by email would be dangerous, as sillysaurus3 originally implied.
- tgragnato 9y agoIt's dangerous, but happened anyway in my case. And without the mitigations that are already available. I'm not trying to argue that it's ok, I'm saying that in my experience bank employees use email for confidential communications.
- Silhouette 9y agoIn that case, you have my sympathies. Far too many organisations, particularly those in sensitive fields like finance, medical care and (surprisingly, perhaps) law are cavalier about sending things via email that really shouldn't be. I think a lot of them genuinely don't understand that it's not a secure or appropriate medium for sending confidential information, and actually what we need to improve that situation is more like a public awareness campaign than theoretical technical solutions that most people aren't going to use anyway or legal/regulatory solutions that just punish a small proportion of the culprits who didn't know they were doing anything wrong anyway.