ISPs Removing Their Customers' Email Encryption

Started by TeaLeaf, November 13, 2014, 04:33:12 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

TeaLeaf

Interesting article at the EFF about STARTTLS.

https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks


BT is my ISP and they do not support STARTTLS.  Shame on them. :sad:
TL.
Wisdom doesn\'t necessarily come with age. Sometimes age just shows up all by itself.  (Tom Wilson)
Talent wins games, but teamwork and intelligence wins championships. (Michael Jordan)

BrotherTobious

"It's hard, but not as hard as Arma!!!" Tutonic
"Over the centuries, mankind has tried many ways of combating the forces of evil... prayer, fasting, good works and so on. Up until Doom, no one seemed to have thought about the double-barrel shotgun. Eat leaden death, demon.." Terry Pratchett

smilodon

I wonder what's impact this has on Google Apps users? I'm assuming my email is encrypted between my PC and Google and so Virgin Media don't get involved? What happens after that is anyone's guess!
smilodon
Whatever's gone wrong it's not my fault.

Gone_Away

couldn't find which do and which don't..

does virgin media do this?

Twyst

That's quite nasty and harsh.

I, for one, host my own email server, but that still leaves me at the mercy of my ISP. Luckily mine guarantees the connection will be pure, unfiltered. But I also pay a premium for this, but mainly for the native IPv6 connection :)
Still, stripping the flag out can be done anywhere along the chain - which is why my server requires STARTTLS so any tom foolery is outright rejected.

I'd rather not send an email than have it read.

But I'd imagine using TOR could easily circumvent this.