German court rules: Emails must be end-to-end encrypted(tuta.com)
16 pointsby khaled_ismaeel7 hours ago4 comments
  • blazarquasar6 hours ago
    This reads like a very low-effort ad post. Odd for them to tag it as “Privacy News”. The ruling they mention (and don’t link any source or give any info for) was in late 2024. Other courts have since ruled differently.

    https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2026/29_K_73...

  • basilikum6 hours ago
    This seems dubious.

    > On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.

    How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.

    The only case where this has much to do with email security is when an email server is breached.

    This whole article is a lot of words around very little information.

    • blazarquasar5 hours ago
      Neither of the rulings made any conclusions on where the breach happened. Though the first instance did speculate that it happened on the sender’s side.

      This wasn’t decisive anyway, as this civil case just focused on the method of transport chosen by the Plaintiff.

  • nubinetwork2 hours ago
    SMTP server-to-server has been plain text since its inception... how do you convince everyone to upgrade or switch protocols/servers to something e2e?

    Edit: google is probably the only provider that does starttls...

  • Arrowmaster6 hours ago
    Maybe someday a real end-to-end encrypted email solution will finally exist.

    Until then all we have are solutions that only work between a small handful of providers or "click this link to view your secure message" garage that could just as easily be replaced and faked.

    • polski-g5 hours ago
      Every time I log into my bank it asks me if I want to switch to electronic statements. Yet I know they won't be sending me a monthly electronic statement; they will send me a link to login (with 2FA!) to view a statement on their portal.

      Just a completely hostile experience -- I am going to stick with the paper, thanks. Let me know when you can send me a monthly PDF.