https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks

        "In recent months, researchers have reported ISPs in the US and Thailand
         intercepting their customers' data to strip a security flag—called
         STARTTLS—from email traffic."


Thanks to Viktor, properly configured postfix clients deployed with DANE should
detect this and refuse to send the email unencrypted.

Paul

_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to