Viewing a single comment thread. View all comments

uzlonewolf t1_j0suw6z wrote

Eh, the connections to and between servers are usually encrypted with TLS, just like websites, so it's not like it's completely plain-text either.

2

alphafalcon t1_j0tsk7q wrote

Yeah, usually... But the default fallback mechanism for "I can't connect via TLS/the certificate doesn't match/is expired/something is wrong" is either to ignore the invalid certificate or fall back to plain text.

It's better that directly sending plaintext but only marginally.

2