3 ms·
Do mainstream client silently fall back for SMTP? Thunderbird, Evolution, Outlook, etc... ? Somehow I doubt it. There is also word around that SMTP certificate
by leni536 2y ago
Do mainstream client silently fall back for SMTP? Thunderbird, Evolution, Outlook, etc... ? Somehow I doubt it.
There is also word around that SMTP certificates are often not verified, but I know that's not true for Thunderbird at least.
The situation might be different between SMTP servers, but that shouldn't really apply for hotel wifi.
- spacebanana7 2y agoGmail, Exchange and iCloud mail all seem to fall back on plaintext when TLS is unavailable. Apparently gmail displays hazard icons in the UI if an email isn’t sent over TLS. I’ve not found precise documentation about Thunderbird’s behaviour. https://workspaceupdates.googleblog.com/2020/04/improve-email-security-in-gmail-with-TLS.html?m=1 https://workspaceupdates.googleblog.com/2020/04/improve-emai... https://support.apple.com/en-gb/guide/security/sec100a75d12/web https://support.apple.com/en-gb/guide/security/sec100a75d12/... https://learn.microsoft.com/en-us/purview/email-encryption https://learn.microsoft.com/en-us/purview/email-encryption
- zinekeller 2y agoThey're asking for the client-to-provider (which tends to be the one vulnerable to these attacks), not provider-to-provider connections (which makes sense, $BUSINESS's on-premise Exchange might not support TLS connections at all).