3.3 Million Mail Servers Dodge TLS: A Sniffing Nightmare!

Around 3.3 million mail servers are playing a risky game of peekaboo without TLS encryption, making them prime targets for network snooping. ShadowServer’s research highlights this cybersecurity faux pas, urging administrators to secure their servers with TLS or consider a VPN. Time to put those vulnerable servers into retirement, folks!

Pro Dashboard

Hot Take:

Dear POP3 and IMAP mail servers, welcome to 2025! It’s high time you stopped living like it’s 1999 and got yourselves some TLS encryption. You don’t want to be the cyber equivalent of a mullet, do you?

Key Points:

  • 3.3 million POP3 and IMAP mail servers lack TLS encryption.
  • Servers are vulnerable to network sniffing attacks that can intercept passwords.
  • Most unprotected servers located in the United States, Germany, and Poland.
  • ShadowServer suggests enabling TLS or moving services behind a VPN.
  • The foundation is actively notifying affected parties of their vulnerability.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?