There's a grain of truth to it: you can't necessarily trust some stranger running a mail server to keep your mail secret. Governments can demand that they turn over their private key, and then all of your email is compromised the same way it would be if your HTTP connection had been snooped. That's why you should use end-to-end encryption (e.g. GnuPG). Still, saying that TLS is unnecessary is a very strange attitude. It at least means that cooperation with the server owner is required to snoop on your email.

Reply via email to