Poll: Do you encrypt your email?

Re:Poll: Do you encrypt your email? by fulafel on Sunday July 14, 2013 @07:27PM (#6042691)

you generally only know about the crypto on the first smtp hop. SMTP crypto is fail-open, unauthenticated and not end to end. it's transport only, decrypted on each SMTP hop.

[ Parent | on HN ]

Re:Poll: Do you encrypt your email? by dfc on Sunday July 14, 2013 @08:04PM (#6042843)

mail-transfer-agents are configured fail open by default. There is nothing about SMTP that requires fail open. You can configure postfix to require TLS for all destinations or for specific domains if you want to:

http://www.postfix.org/TLS_README.html#client_tls_encrypt

Depending on your environment you could also do the same thing and require DANE:

http://www.postfix.org/TLS_README.html#client_tls_dane

I am sure exim has an equivalent setting (maybe not for DANE).

[ Parent | on HN ]