3.3 Million Mail Servers Dodge TLS: A Sniffing Nightmare!
Around 3.3 million mail servers are playing a risky game of peekaboo without TLS encryption, making them prime targets for network snooping. ShadowServer’s research highlights this cybersecurity faux pas, urging administrators to secure their servers with TLS or consider a VPN. Time to put those vulnerable servers into retirement, folks!

Hot Take:
Dear POP3 and IMAP mail servers, welcome to 2025! It’s high time you stopped living like it’s 1999 and got yourselves some TLS encryption. You don’t want to be the cyber equivalent of a mullet, do you?
Key Points:
- 3.3 million POP3 and IMAP mail servers lack TLS encryption.
- Servers are vulnerable to network sniffing attacks that can intercept passwords.
- Most unprotected servers located in the United States, Germany, and Poland.
- ShadowServer suggests enabling TLS or moving services behind a VPN.
- The foundation is actively notifying affected parties of their vulnerability.
Already a member? Log in here