List of common email domains that don't support TLS

[mavhc]

I've enabled TLS for * on Office 365. Now I'm adding exceptions, thought we might as well crowd source the results, and then shame the culprits. If you run a reportin O365 you can then filter the csv for outgoing without TLS1.2: https://protection.office.com/#/reportv2?id=ConnectorReport&pivot=ConnectorDisplayName Request report>Start date 90 days ago>Email to yourself>wait a while. Load into excel, auto filter, etc.

 

Also check with https://www.checktls.com/TestReceiver

 

So far the main domain that refuses TLS email is:

 

btinternet.com

[pete]

nottingham.ac.uk

sda-ltd.com (provides OFSM infrastructure)

[mavhc]

nottingham.ac.uk

 

I've nudged some people into nudging some people about that now, thanks.

[FN-GM]

@btopenworld.com was used before @btinternet.com and that doesn't support TLS either.

 

The Scottish Government is another we have had issues with: gov.scot

Edited March 15, 2019 by FN-GM

[mavhc]

customer-service.tesco.com

nottinghamshirefa.com (emailed them)

reprotec.uk.com (only TLS 1.0, emailed them)

shu.ac.uk (emailed postmaster@)

bham.ac.uk (emailed postmaster@)

 

If everyone can keep annoying^W encouraging them that would be helpful

[pete]

education.gov.uk

plus.com (presumably using BT infrastructure)

[mavhc]

education.gov.uk -- this passes on https://www.checktls.com/TestReceiver

plus.com (presumably using BT infrastructure) -- these will be tricker as they use [email protected]

[pete]

education.gov.uk -- this passes on https://www.checktls.com/TestReceiver

 

Yup, you're right - one of their 3rd party mailing service using [email protected] (firmstep.com) doesn't support it.

[sister_annex]

bham.ac.uk

[TABLE=width: 441]

[TR]

[TD=width: 441]newman.ac.uk

birminghambotanicalgardens.org.uk

npower.com

 

[/TD]

[/TR]

[/TABLE]

Edited March 18, 2019 by sister_annex
adding more to the list

[mavhc]

My nottingham.ac.uk inside source got it fixed, not heard back from anyone else

[mavhc]

btinternet.com is TLS now

gov.scot is

npower.com is

shu.ac.uk -- Sheffield, you rock, and also steal. Although your orangeade.hallam.shu.ac.uk server is offline

reprotec.uk.com -- Your drivers and firmware updates might suck, you might not change the default passwords on your photocopiers, but at least I can email you about it now.

 

bham.ac.uk is still terrible, hey Birmingham, Nottingham is better than you

newman is not. Hey newman? More like Old Man, get with the times.

 

Great work humans and AIs, keep going.

[mavhc]

portland.ac.uk has tls, but is using a self signed cert, so kinda pointless. As the song goes, Blame Capita

[Tefters]

denbigh.net (have contacted them as using self-cert!)

safesmart.co.uk (have been in contact with their 3rd party IT company due to expired cert)

[CyBeRkId2002]

Anyone struggling to email Amazon???

 

https://www.checktls.com/TestReceiver?LEVEL=DETAIL&EMAIL=email.amazon.com

[Tefters]

Nope and just did a test on an Amazon email and everything passed?

 

Anyone struggling to email Amazon???

 

https://www.checktls.com/TestReceiver?LEVEL=DETAIL&EMAIL=email.amazon.com

[mavhc]

2 years later these still fail, everyone else is ok

 

nottinghamshirefa.com

sda-ltd.com

newman.ac.uk

portland.ac.uk