[ NNSquad ] ISPs Removing Their Customers' Email Encryption

[Lauren Weinstein <lauren@vortex.com>]

ISPs Removing Their Customers' Email Encryption

(EFF): https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks

    "Another network-tampering threat to user safety has come to light from
     other providers: email encryption downgrade attacks. In recent months,
     researchers have reported ISPs in the US and Thailand intercepting
     their customers' data to strip a security flag--called STARTTLS--from
     email traffic. The STARTTLS flag is an essential security and privacy
     protection used by an email server to request encryption when talking
     to another server or client."

 - - -

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org 
 - PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
I am a consultant to Google -- I speak only for myself, not for them.
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein 
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
nnsquad mailing list
http://lists.nnsquad.org/mailman/listinfo/nnsquad