OP finds vulnerability where a forum sends you your password in plaintext over email and everyone misses the forest for the trees
Aganim @ Aganim @lemmy.world Posts 0Comments 288Joined 2 yr. ago
Aganim @ Aganim @lemmy.world
Posts
0
Comments
288
Joined
2 yr. ago
While I agree that likely most SMTP traffic is sent encrypted these days, you simply cannot be sure. Just because you received something over an encrypted connection doesn't mean that relays in between also used this. The webserver could have handed over the email unencrypted to an SMTP server for all you know. And even if an encrypted connection was used the mail might still have been copied to a log on the SMTP server. Email is unfortunately inherently unsafe.