On Mon, Jul 28, 2014 at 09:35:39AM -0600, Paul Condon wrote: > On Mon, Jul 28, 2014 at 01:37:57PM +0000, Curt wrote: > > On 2014-07-28, Joel Rees <joel.rees@gmail.com> wrote: > > > > > > (Piques my curiosity.) > > > > > >> They have made > > >> it clear in that they do not require or use TLS. > > > > > > (Wondering what TLS has to do with strangeness in this case.) > > I have read that without TLS the email file, and my password are > sent over the internet in the clear, un-encrypted, and that is > 'clearly' a BAD THING. Yes-with-a-but. TLS is the same technology used in HTTPS websites; it encrypts your message in transit. The WWW and E-mail are quite different beasts, though. E-mail is primarily a multi-hop, server-to-server communication. If you connect to your ISP and send a message using TLS, then yes, your message is protected from prying eyes. The message is now at the ISP's server but it's not destined for them, so they connect to another server (either the MX for the recipient or perhaps just another outgoing hop). At this point, you have no control over how the message is handled. Maybe it's sent with TLS, but probably not. Maybe it's sent within seconds, but it could be held for hours or days. If you really care about people seeing what you write, use an end-to-end encryption such as GPG. If you care about people seeing who you write to, then don't use e-mail. > > I have seen in recent days enough error message blaming TLS to > convince me that there are many programmers who beleive it is. > Until recently, I was like most of the world unaware of the > whole issue. > > > > > > > > > Maybe what mutt has to do with vlc. > > -- > Paul E Condon > pecondon@mesanetworks.net > > > -- > To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org > Archive: [🔎] 20140728153539.GB5024@gmail.com">https://lists.debian.org/[🔎] 20140728153539.GB5024@gmail.com >
Attachment:
signature.asc
Description: Digital signature