Using email without any type of encryption

[strep3241]

Let me try to explain myself as clearly as possible. Our phone, internet and tv company is going through a transition, a different company is taking over.

So one thing that means is I had to change my email address. I got the email changed and setup under the Thunderbird program. With this new account, there is no type of encryption of any kind.

With my last account, I was able to have SSL selected but with the new account, it will not work if I try to select SSL. How big of a deal is it to use email with no type of encryption? Another thing I don't like is the new account uses the POP server where as my old account used the IMAP server.

On the topic of types of servers, I know IMAP servers leaves a copy of the message on the server where as POP, once you receive it, it is on your computer. But POP has an option of leaving a copy of the message on the server. How is that any different?

Is there anyway of solving this short of using a totally different email account like Gmail? That wouldn't be so bad but I already went through and updated my email on a bunch of my online accounts.

If this belongs somewhere else, feel free to move it.

 

[lxskllr]

On a secure network, the lack of encryption probably isn't a huge deal, but I'd still be uncomfortable with it. If nothing else, it shows the company has little concern for privacy and security. If they're sloppy with mail, what else are they sloppy with? On an unsecure network(Starbucks, hotel...), your password could be sniffed, and your account taken.

POP vs IMAP. I don't know the specifics of how they work, but IMAP is a true sync, with changes you make on your client(s) propagating to the server. POP is one way, where you download messages, and have the choice of leaving them on the server.

If it were me, I'd use an email provider not connected to an ISP. You might want to change again in the future, or the company could get bought again, and you're back where you started.

 

[John Connor]

Use a VPN.

 

[mikeymikec]

If it were me, I'd use an email provider not connected to an ISP. You might want to change again in the future, or the company could get bought again, and you're back where you started.

+1

This is what I advise pretty much all of my customers.

 

[Mushkins]

Keep in mind that by checking off that "use SSL" box, it is not end-to-end encryption. The transmission to/from the mailserver and your workstation is encrypted, but as that mail moves between mailservers across the general internet, it is not encrypted.

If it's just your personal email from your ISP between you and grandma about how thanksgiving went, it's not the end of the world but still something to be conscious of, though i'd doubly make sure not to use it for anything sensitive like online banking statements. It's up to you to decide if moving your email address again is a big enough hassle not to just move to something like gmail.

If it's for a business or you do use it for any sort of sensitive information (financials, business correspondence, sign up for accounts, etc) i'd absolutely switch, and look into end-to-end encryption solutions if you need to email any client data like SSNs that need to be protected.