Get the latest tech news
Experts warn millions of email servers could be vulnerable to attack | Over 3 million IMAP and POP3 mail servers are without TLS encryption
Over 3 million IMAP and POP3 mail servers are without TLS encryption
Without the encryption, credentials and message content is sent in clear text, which exposes hosts to eavesdropping network sniffing attacks. “We have started notifying about hosts running POP3/IMAP services without TLS enabled, meaning usernames/passwords are not encrypted when transmitted,” the ShadowServer Foundation said in a tweet. Whilst TLS is very common, ImmuniWeb reports that from Q1 2024 to date, there were 1,421,781 SSL/TLS events - so even with the encryption, there are dangers for users.
Or read this on r/technology