Gmail's Encryption Warning Spurs 25% Increase In Encrypted Inbound Emails (theverge.com)
An anonymous reader quotes a report from The Verge: Google's efforts to keep users safe might be forcing other email providers to make better security decisions. In February, the company started flagging unencrypted emails, allowing Gmail users to know whether they're sending emails to, or receiving emails from, providers that don't support TLS encryption. Since then, the amount of inbound mail sent over an encrypted connection to Gmail users has increased by 25 percent, Google explained in a blog post released today. The majority of the uptick likely comes from providers updating their clients so they can avoid getting flagged by Google, the company said in a comment to The Verge. Without in-transit encryption, which Google provides by default, emails could potentially be read by attackers because their body and data are sent in plain text.
Google is also going to send Gmail users a full-page warning notice if they click on a potentially malicious link. In addition, they are going to increase warnings about state-sponsored attackers with a full-page alert about how to secure accounts through two-factor authentication and the use of a security key.
If the ISP or email provider host the domain that your email is at, is it really that much of a problem?
Sure end-to-end is nice, but these guys can accept, redirect and intercept your email in a million other ways anyway.
Personal domains, forwarded emails, etc. - that's another matter entirely. But Google can read anything@gmail.com if they want, etc.