ANSSI Reco-Messagerie §3.1
STARTTLS obligatoire sur tous les MX
UnveilScan findings mapped to this control
The scanner emits 1 distinct finding on this control. Click "Scan a domain" below to see which of them currently apply to your site, with copy-paste remediation snippets (nginx, Apache, DNS BIND, web-server config).
email.mx_no_starttls
⏱ 1h
EMAIL — Mx no starttls
Risk if ignored: Every message travels unencrypted to your MX — passive sniffing, SMTP MITM trivial.
security legal