[Ach] filippo on SSL SMTP encryption

[L. Aaron Kaplan]

https://blog.filippo.io/the-sad-state-of-smtp-encryption/

Nice reading.

"Conclusion
So this is it. The Internet is terrible and until DNSSEC sees wide deployment SMTP will have at best opportunistic encryption."

(...)

"Still, STARTTLS is better than allowing dragnet surveillance, so please, please support it. You don't even have to get a signed certificate! There are no excuses."


Even though I heard some critical voices on dnssec, I do believe we should cover it in our guide...

--- 
// L. Aaron Kaplan <kaplan at cert.at> - T: +43 1 5056416 78
// CERT Austria - http://www.cert.at/
// Eine Initiative der nic.at GmbH - http://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.cert.at/pipermail/ach/attachments/20150331/925cbbe4/attachment.sig>