View Single Post
  #18   Report Post  
Posted to uk.d-i-y
John Rumm John Rumm is offline
external usenet poster
 
Posts: 25,191
Default How secure was / is email

On 24/01/2019 09:27, Chris Green wrote:
The Natural Philosopher wrote:
On 24/01/2019 00:45, Biggles wrote:
Internet mail between servers uses SMTP which isn't
encrypted.


pretty sure it can be and routinely is. But not universally.

Viz TLS and friends.

When you specify TLS for an E-Mail account I think it simply means
that TLS is used to encrypt the password, not when actually
transferring the E-Mail.


If you use STARTTLS, or SSL[1] for the transport layer, then the entire
content is encrypted for transport as well.

[1] SSL using secure sockets layer and all of the conversation between
client and mail server is encrypted from the start. STARTLS starts the
connection on an unencrypted link, but then negotiates up to a fully
encrypted one for the message exchange takes place.

--
Cheers,

John.

/================================================== ===============\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\================================================= ================/