Browse by Topic: Security & Reliability
StartMail Encryption
Last modified on 11 November 2017 01:34 AM

This article will provide more information about the kind of encryption StartMail uses.

To learn how to get started with StartMail email encryption, please click here.

StartMail supports Transport Layer Security (TLS) versions 1.1 and 1.2.. 256-bit encryption is available for all browsers that support TLS version 1.2, such as Chrome, Safari and Firefox, Internet Explorer, etc.

Some older versions of Internet Explorer or Opera may not support TLS 1.2. For browsers that don't support TLS 1.2, the 256-bit ciphers are vulnerable to the so-called "BEAST" attack, so we offer the 128-bit RC4 cipher that isn't. While offering a 128-bit cipher instead of a 256-bit one may seem like an unusual choice, we believe that offering strong 128-bit encryption while mitigating the possibility of a BEAST-based attack is a worthy approach to safeguarding your security. In addition to improving support for newer versions of TLS, browsers may be individually patched to specifically protect against the BEAST attack (which must be initiated on the client side).

We have also enabled "Perfect Forward Secrecy", or PFS. If someone wiretaps your internet connection and records your secure web site accesses, s/he will be able to decrypt that data in a future date if the "private key" of a server without PFS would ever be compromised. With PFS, such a recording will be safe even after a possible server security breach in the future.

For additional details on the level of SSL feature support that StartMail provides from a third-party perspective, please visit Qualys' SSL Labs evaluation of StartMail's features. StartMail is proud to note that we score higher than our competitors.

NOTES:
- Click these links for more information on BEAST or PFS.
- You can find more information about StartMail encryption in our Technical Whitepaper

 

(10 vote(s))
This article was helpful
This article was not helpful

Still haven't found the answer to your question? Click here to contact support.