Google, Microsoft, Yahoo: We want to stop email snooping

    Google, Microsoft, Yahoo: We want to stop email snooping


    Posted: 21 Mar 2016
    Web giants are collaborating to fix some of the problems that expose STARTTLS to attacks that downgrade encrypted connections to insecure ones.

    Amazon, Facebook, Google, Microsoft, Yahoo, and others have all started supporting STARTTLS, an extension that can upgrade plain text connections on the Simple Mail Transfer Protocol (SMTP) to encrypted ones.

    But according to recent research, contributed to by Google, one of the problems with this "opportunistic encryption" enabled by STARTTLS is that the system "favors failing open", which means that even if something isn't right, the email will still be sent unencrypted, also known as 'in the clear'.

    The design is meant to encourage adoption of STARTTLS. However, the research highlights that attackers are easily able to use network devices to force a downgrade to non-encrypted channels...


    Read more: Google, Microsoft, Yahoo: We want to stop email snooping by fixing these encryption flaws | ZDNet
    Brink's Avatar Posted By: Brink
    21 Mar 2016



 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:06.
Find Us