3 ms·
it should be less than that, if the servers are controlled by competent admins - everything after STARTTLS should be garbage to beholder.
by arpa 6y ago
it should be less than that, if the servers are controlled by competent admins - everything after STARTTLS should be garbage to beholder.
- badrabbit 6y agoThe MTAs are hostile,they are the threat. Email can traverse multiple servers that have nothing to do with the sender or recipient. Competency won't prevent them from allowing backdoor access or sniffing and selling metadata.
- arpa 6y agoMTAs, if configured correctly, do not talk to anything outside your network that is not specified by MX DNS records. Unless we are talking about emails traversing internal networks and even then competent admins do not transmit data in cleartext, so sniffing is out of question. Of course, some metadata is always leaked, but that is the reality of most internet protocols, HTTPs notwithstanding. Now if we're talking about backdoors, it's a game over in any scenario.
- u801e 6y agoI was thinking more about encryption at rest as opposed to in transit, but you do make a good point.