Interesting article at the EFF about STARTTLS.
https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks
BT is my ISP and they do not support STARTTLS. Shame on them. :sad:
Looks like Zen does
I wonder what's impact this has on Google Apps users? I'm assuming my email is encrypted between my PC and Google and so Virgin Media don't get involved? What happens after that is anyone's guess!
couldn't find which do and which don't..
does virgin media do this?
That's quite nasty and harsh.
I, for one, host my own email server, but that still leaves me at the mercy of my ISP. Luckily mine guarantees the connection will be pure, unfiltered. But I also pay a premium for this, but mainly for the native IPv6 connection :)
Still, stripping the flag out can be done anywhere along the chain - which is why my server requires STARTTLS so any tom foolery is outright rejected.
I'd rather not send an email than have it read.
But I'd imagine using TOR could easily circumvent this.