25 ms·

Is Email Confidential in Transit Yet?

• deleted 2y ago
  [deleted]
• bell-cot 2y ago
  For anything high-value, just assume "no". Sure, assuming "yes" is far more convenient. And feels much nicer too. But even if you're familiar with all of the infrastructure that an email message will see between you and the recipient...yeah. Email is a top target for nation-state actors, A List criminal organizations, and on down a long line from there. If the Blue Teams - or one of their many and historically problematic vendors - make even one mistake, that's all it takes.
• bee_rider 2y ago
  It is fine for emails to not be encrypted. The bad behavior is being performed by people who expect them to be encrypted. They are maybe-encrypted. If you have an actual need for security, like resetting a password that actually matters, they must be treated as they were designed: non-encrypted, the postcard of the Internet. If you want encrypted emails, you want some other type of messenger. If you insist on encrypted emails, use PGP or something I guess.
  • ttyprintk 2y ago
    Sure, but this article is about the large minority of users who are denied STARTTLS. Asking for standard encryption their server is actively prevented from ensuring.