Re: [perpass] Another mail-related proposal

[Randy Bush <[e-mail]>]

>> smtp is hop by hop.  just because A encrypts to B, A has zero assurance
>> that B encrypts to C.  hence, e2e encryption is pretty much mandatory
>> against a purely passive attacker.
> ...which goes back to the original thing I was suggesting: that A should
> be able to signal to B that it should only relay the message (e.g., to
> C) if the channel is also encrypted and that C also will observe the
> restriction if it needs to relay the message further.

and A trusts B and B's software and configuration why?  transport
encryption by default good.  e2e encryption by default gooder.  both
great.

randy