undefined | Better HN

0 pointsbriHass11mo ago0 comments

Ironic, because it's assumed your email is insecure and visible to more than just you, but it's used as a password reset and/or 2FA mechanism for almost everything.

It would be nice if sites had a checkbox that allowed you to affirm that your email is secure and private, so then detailed emails were sent.

0 comments

SoftTalker11mo ago

There's no way to guarantee that. SMTP is not a secure protocol. Your message could be read by any intermediary along its delivery route.

grayhatter11mo ago

It is possible to deliver emails IFF the receiving server presents a valid TLS connection and cert. I don't think I've seen anyone actually enforce that though.

SoftTalker11mo ago

Yes but the server itself has full visibility on the message while it is handling it. It can scan it for viruses, parse it for ad insertion, feed it to train an LLM, just keep a copy of everything, whatever.

1 more reply

kevin_thibedeau11mo ago

SMTP can use intermediate relays. TLS doesn't guard against the middlemen.

2 more replies

j / k navigate · click thread line to collapse

0 pointsbriHass11mo ago0 comments

Ironic, because it's assumed your email is insecure and visible to more than just you, but it's used as a password reset and/or 2FA mechanism for almost everything.

It would be nice if sites had a checkbox that allowed you to affirm that your email is secure and private, so then detailed emails were sent.

0 comments

SoftTalker11mo ago

There's no way to guarantee that. SMTP is not a secure protocol. Your message could be read by any intermediary along its delivery route.

grayhatter11mo ago

It is possible to deliver emails IFF the receiving server presents a valid TLS connection and cert. I don't think I've seen anyone actually enforce that though.

SoftTalker11mo ago

1 more reply

kevin_thibedeau11mo ago

SMTP can use intermediate relays. TLS doesn't guard against the middlemen.

2 more replies

j / k navigate · click thread line to collapse