Re:ISPs Removing Their Customers' Email Encryption
by willvarfar on Tuesday November 11, 2014 @06:28PM
(#8593006)
If, say, Thunderbird is configured to use STARTTLS to talk to the IMAP and SMTP servers, can this attack strip it or will Thunderbird refuse to connect to an unencrypted server?
[ Parent
| on HN ]
Re:ISPs Removing Their Customers' Email Encryption
by asutherland on Tuesday November 11, 2014 @06:57PM
(#8593115)
In very old versions of Thunderbird (pre-mercurial), there was an option akin to "TLS, if available" which would be vulnerable. But Thunderbird has not offered it as an option for new accounts for quite some time.