News for hackers. Stuff that matters.

A comment on The PGP Problem. Parent comment

Re:The PGP Problem by dasil003 on Wednesday July 17, 2019 @12:22AM (#20456437)
Are you assuming everyone uses Gmail or do you not know how SMTP works?
[ Parent | on HN ]
Re:The PGP Problem by Godel_unicode on Wednesday July 17, 2019 @01:37AM (#20456784)
You might be surprised just how many mail providers support STARTTLS for email, at least opportunistically.

https://www.fastmail.com/help/technical/ssltlsstarttls.html

[ Parent | on HN ]
Re:The PGP Problem by willvarfar on Wednesday July 17, 2019 @01:51AM (#20456848)
And opportunistic STARTTLS is vulnerable to downgrade attacks by MITM.

the problems with email are that, no matter how sure you are that the connection between you and your mail server, and your local and server storage, are secure, the parties you may be interacting with are not. And then, as is talked about in the article, your recipient forwards the mail as plaintext...

[ Parent | on HN ]
Re:The PGP Problem by delroth on Wednesday July 17, 2019 @08:04AM (#20458504)
And downgrade attacks are mitigated by MTA-STS: https://www.hardenize.com/blog/mta-sts

Not supported by everyone just yet since this is a new standard, but Gmail at least supports it.

[ Parent | on HN ]