Re: [liberationtech] Email provider enabling enforced SMTP/TLS for inbound MX-received emails

[J.M. Porup]

On Mon, Apr 04, 2016 at 08:14:00AM -0400, Joseph Lorenzo Hall wrote:
> On Sun, Apr 3, 2016 at 5:02 PM, Moritz Bartl  wrote:
> > On 01/03/2016 02:57 PM, Fabio Pietrosanti (naif) - lists wrote:
> >> Ideally, i would like an automatic email to be sent back to the sender
> >> of that email, informing his that his email provider/email server is
> >> not secure and must be updated to enable sending email securely.

Fastmail have been a pioneer in this area. They might seriously consider
implementing an optional per-user implementation of what you describe.
Worth asking.

jmp

-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Email provider enabling enforced SMTP/TLS for inbound MX-received emails

[Moritz Bartl]

On 01/03/2016 02:57 PM, Fabio Pietrosanti (naif) - lists wrote:
> Ideally, i would like an automatic email to be sent back to the sender
> of that email, informing his that his email provider/email server is
> not secure and must be updated to enable sending email securely.

Yes, I would like to see that, but not only as a hosted mail provider
option, but maybe first as a set of scripts for OpenSMTPd and Postfix.

The most promising project is
https://github.com/EFForg/starttls-everywhere , but definitely more
could be done (and this project needs help).

-- 
Moritz Bartl
Renewable Freedom Foundation
https://renewablefreedom.org/
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Email provider enabling enforced SMTP/TLS for inbound MX-received emails

[rjc]

On 2016-01-03 08:57, Fabio Pietrosanti (naif) - lists wrote:
Startmail.com might do this (reject non-TLS connections). I couldn't 
find anything on their website. You could always ask them.


Jason Cronk




Hi all,

does anyone knows of an email provider enabling enforced SMTP/TLS for
inbound MX-received emails?

Assume that i want my provide to refuse email destinated to me, at
inbound Mail Exchanger level, if they are not coming encrypted with
SMTP/TLS, with a decent TLS version and with a decent cipher.

Ideally, i would like an automatic email to be sent back to the sender
of that email, informing his that his email provider/email server is 
not

secure and must be updated to enable sending email securely.
It would provide increased security against massive surveillance of my
own email and automatic advocacy and advice for email security to 
sender

writing me from unsecure email.

Any email provider that enable to do so?

--
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - https://globaleaks.org - https://tor2web.org 
-

https://ahmia.fi


--
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change 
to digest, or change password by emailing moderator at compa...@stanford.edu.

[liberationtech] Email provider enabling enforced SMTP/TLS for inbound MX-received emails

[Fabio Pietrosanti (naif) - lists]

Hi all,

does anyone knows of an email provider enabling enforced SMTP/TLS for
inbound MX-received emails?

Assume that i want my provide to refuse email destinated to me, at
inbound Mail Exchanger level, if they are not coming encrypted with
SMTP/TLS, with a decent TLS version and with a decent cipher.

Ideally, i would like an automatic email to be sent back to the sender
of that email, informing his that his email provider/email server is not
secure and must be updated to enable sending email securely.
It would provide increased security against massive surveillance of my
own email and automatic advocacy and advice for email security to sender
writing me from unsecure email.

Any email provider that enable to do so?

-- 
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - https://globaleaks.org - https://tor2web.org -
https://ahmia.fi
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.