Comment 9 for bug 3165

Revision history for this message
Martin Pool (mbp) wrote : Re: [Bug 3165] Re: Launchpad sends (unencrypted) mail notifications about private bug reports

Turning on voluntary SMTP TLS on outgoing mail (from eg fiordland)
would get close to the security properties of https, with no code
changes and no user disruption. Like for https, this would protect
the data in transit, and it is fairly plausible (though not
guaranteed) that users have a secure path between their MUA and MX,
and that their MUA is as secure as their browser.