Winding Down the STARTTLS Everywhere Project, and the Future of Secure Email

guest · Apr 22, 2020

Winding Down the STARTTLS Everywhere Project, and the Future of Secure Email
April 21, 2020
https://www.eff.org/deeplinks/2020/...ls-everywhere-project-and-future-secure-email

EFF started our STARTTLS Everywhere project in 2014, in a post-Snowden moment when the technology community banded together to push transport encryption as a crucial necessity.

To complement HTTPS Everywhere, we launched a parallel effort for encrypting emails as they are delivered between email providers: STARTTLS Everywhere.
We’ve made major strides in transport security for email since then, thanks to the cooperation of email providers, protocol authors, and mailserver developers.

We’ll slowly be winding down our work on the STARTTLS policy list, though we will continue to advocate for improved transport security in email and everywhere else on the Internet.
While support for the project has been encouraging, the data we publish is not widely used by email providers.
Click to expand...

EFF: Technical Deep-Dive: Winding Down the STARTTLS Policy List

The STARTTLS policy list started off as a mechanism for mailservers to learn TLS information about other servers from EFF’s perspective. Since MTA-STS was launched, it has evolved into a mechanism to secure the initial MTA-STS lookup so that email operators can know when particular providers insist on secure delivery.

We’re continuing to promote more scalable ways for securing your mailserver, like MTA-STS and DANE. For the time being, here are some guidelines if your mailserver is using the STARTTLS policy list for security.
Click to expand...

Log in or Sign up

Winding Down the STARTTLS Everywhere Project, and the Future of Secure Email

guest Guest

Log in or Sign up

Winding Down the STARTTLS Everywhere Project, and the Future of Secure Email

guest Guest

Useful Searches