Re:Chrome’s address bar will use https:// by default
by lazyweb on Tuesday March 23, 2021 @03:13PM
(#26559080)
That's exactly how mail works between servers though. Granted, it's about semantics, but virtually all mail servers accept TLS connections without the need to check cert validity of their respective counterparts.
[ Parent
| on HN ]
Re:Chrome’s address bar will use https:// by default
by tptacek on Tuesday March 23, 2021 @05:09PM
(#26560437)
Yes: encryption does not work in multi-hop SMTP email. Email is not a secure messaging system, and it is difficult to even build a novel secure messaging system on top of it.
Client-server TLS has a goal of actually thwarting adversaries. SMTP encryption is mostly about raising the costs of adversaries (I think there's plusses and minuses with this strategy; to some threshold, increasing costs for the US IC is actually helping them, organizationally, because the IC's real primary goal is budget-seeking).