On Tue, Jun 28, 2005 at 08:48:45AM +0200, martin f krafft wrote:
> also sprach Lionel Elie Mamane <[EMAIL PROTECTED]> [2005.06.28.0755 +0200]:

>>> If you want secure email, encrypt it. Don't depend on the transport.

>> And the envelope?

> I really doubt that you have set up your mail server so that your
> provider couldn't *trivially* launch a man-in-the-middle attack
> anyway.

No, I haven't. Still, that's an active attack, not passive
eavesdropping. Hence, while still trivial, less so.

> Or do you actually check client certificates?

It wouldn't help, as I'd fallback to non-TLS connection anyway.

-- 
Lionel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to