4 ms·

Of course, if you just enable it. http://www.sami-lehtinen.net/blog/securing-email-transport-starttls-postfix-ca-certificates-fingerprint-authority http://www.s

Of course, if you just enable it. http://www.sami-lehtinen.net/blog/securing-email-transport-starttls-postfix-ca-certificates-fingerprint-authority http://www.sami-lehtinen.net/blog/securing-email-transport-s... Unfortunately even many large providers use invalid (non verifiable) certificates. Unless you of course install their public key locally and verify against it.

teekert 12y ago
Unfortunately? I also use unverified certificates on my own mail server. I don't want to be requesting certificates or signing for every time I set up a mail server. And why does it make encryption pointless? The traffic IS encrypted, server to server. Are you afraid someone hijacked a domain?
- drdaeman 12y ago
  Because unauthenticated encryption is no good. It only protects communications against passive attackers (mere observers), which, I think, is generally considered to be far from sufficient. Meanwhile, it creates a false sense of security, which isn't a good thing.