3 ms·
Many systems will not deliver where encryption is not present. Some systems won't deliver without a certificate issued by a public CA. And some systems won't ac
by scandox 1y ago
Many systems will not deliver where encryption is not present. Some systems won't deliver without a certificate issued by a public CA. And some systems won't accept an LE cert but require something called OV(organizational validation).
- gruez 1y ago>Some systems won't deliver without a certificate issued by a public CA. And some systems won't accept an LE cert but require something called OV(organizational validation). Which systems are these? Are they public email providers? Are they enterprises?
- scandox 1y agoEnterprises. Porsche.com corporate email for example won't deliver without an OV. So once you're in the business of providing any kind of general email service you eventually have to deal with it. Edit: Porsche corporate
- jamespo 1y agoI wonder how many side gmail accounts their employees have to use
- TheNewsIsHere 1y agoVolkswagen has similar policies regarding partners and vendors. If you want into that ecosystem they require that you setup specific mail routing policies and mutually authenticated CAs to exchange email.
- arccy 1y agobut delivery to means the receiving end is a server, so they just need server auth TLS certs, not client auth.
- scandox 1y agoThat is true. I interpreted your last remarks as meaning you thought that most normal SMTP was outright unencrypted or opportunistically encrypted with self-signed certs.