This reads like a very low-effort ad post.
Odd for them to tag it as “Privacy News”.
The ruling they mention (and don’t link any source or give any info for) was in late 2024. Other courts have since ruled differently.
> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.
How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.
The only case where this has much to do with email security is when an email server is breached.
This whole article is a lot of words around very little information.
Neither of the rulings made any conclusions on where the breach happened. Though the first instance did speculate that it happened on the sender’s side.
This wasn’t decisive anyway, as this civil case just focused on the method of transport chosen by the Plaintiff.
Maybe someday a real end-to-end encrypted email solution will finally exist.
Until then all we have are solutions that only work between a small handful of providers or "click this link to view your secure message" garage that could just as easily be replaced and faked.
Every time I log into my bank it asks me if I want to switch to electronic statements. Yet I know they won't be sending me a monthly electronic statement; they will send me a link to login (with 2FA!) to view a statement on their portal.
Just a completely hostile experience -- I am going to stick with the paper, thanks. Let me know when you can send me a monthly PDF.
This reads like a very low-effort ad post. Odd for them to tag it as “Privacy News”. The ruling they mention (and don’t link any source or give any info for) was in late 2024. Other courts have since ruled differently.
https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2026/29_K_73...
This seems dubious.
> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.
How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.
The only case where this has much to do with email security is when an email server is breached.
This whole article is a lot of words around very little information.
Neither of the rulings made any conclusions on where the breach happened. Though the first instance did speculate that it happened on the sender’s side.
This wasn’t decisive anyway, as this civil case just focused on the method of transport chosen by the Plaintiff.
Maybe someday a real end-to-end encrypted email solution will finally exist.
Until then all we have are solutions that only work between a small handful of providers or "click this link to view your secure message" garage that could just as easily be replaced and faked.
Every time I log into my bank it asks me if I want to switch to electronic statements. Yet I know they won't be sending me a monthly electronic statement; they will send me a link to login (with 2FA!) to view a statement on their portal.
Just a completely hostile experience -- I am going to stick with the paper, thanks. Let me know when you can send me a monthly PDF.
SMTP server-to-server has been plain text since its inception... how do you convince everyone to upgrade or switch protocols/servers to something e2e?
Edit: google is probably the only provider that does starttls...
Are you joking?