Making email more secure with MTA-STS standard

guest · Apr 10, 2019

Gmail making email more secure with MTA-STS standard
April 10, 2019
https://security.googleblog.com/2019/04/gmail-making-email-more-secure-with-mta.html

We’re excited to announce that Gmail will become the first major email provider to follow the new SMTP MTA Strict Transport Security (MTA-STS) RFC 8461 and SMTP TLS Reporting RFC 8460 internet standards.
SMTP alone is vulnerable to man-in-the-middle attacks
SMTP alone only provides best-effort security with opportunistic encryption, and many SMTP servers do not prevent certain types of malicious attacks intercepting email traffic in transit.
MTA-STS uses encryption and authentication to reduce vulnerabilities
A MTA-STS policy for your domain means that you request external mail servers sending messages to your domain to verify the SMTP connection is authenticated with a valid public certificate and encrypted with TLS 1.2 or higher.
Gmail is starting MTA-STS adherence. We hope others will follow
This means Gmail will honor MTA-STS and TLS reporting policies configured when sending emails to domains that have defined these policies.
We hope many other email providers will soon adopt these new standards that make email communications more secure.
Click to expand...

Stefan Froberg · Apr 10, 2019

What's wrong with just using DNSSEC and DANE for handling authentication and encryption ?
Oh, right....the CA provider industry does not like to get out of business....

Log in or Sign up

Making email more secure with MTA-STS standard

guest Guest

Stefan Froberg Registered Member

Log in or Sign up

Making email more secure with MTA-STS standard

guest Guest

Stefan Froberg Registered Member

Useful Searches