HackerOne: (lack of) smtp transport layer security
Hi, It appears that email messages from the platform are sent via plain SMTP even though the receiving MX supports ESMTPS the use of ESMTP when STARTTLS is also successfully negotiated to provide a strong transport encryption layer. This allows for eavesdropping along the path between the...