Linux Certificate Authority root stores have a too simple view of 'trust'

Re:Linux Certificate Authority root stores have a too simple... by tinus_hn on Wednesday December 07, 2022 @05:26AM (#33892749)

It’s delivering email, there is no way for the receiving site to state a certificate is required anyway. Traditionally it’s just a plaintext connection on port 25 and using and supporting STARTTLS is optional.

I suppose you could write up a way to specify this in DNS but it’d take decades to be implemented and you would have to deal with pushback from the snoops who I’m sure don’t mind they can peep into the email you receive.

[ Parent | on HN ]

Re:Linux Certificate Authority root stores have a too simple... by usr1106 on Wednesday December 07, 2022 @06:01PM (#33901621)

I guess the support of TLS was added for confidentiality and integrity on untrusted networks. If you don't verify the certificate a MITM attack is possible. So what is the remaining benefit of using TLS?

[ Parent | on HN ]