IBE on Fortimail

[psniech]

How do we prevent a scenario when the first email is sent to a particular recipient within the IBE system, being intercepted by a hacker? After this hackers can create accounts in IBE and read emails.

[AEK · Accepted solution]

If the mail transits via a TLS channel why do you think a third person can read it?

[psniech]

But what in case when such a email is trasmitted via series of MTA and I cannot be sure that between 2 MTA not controlled be me email is send in clear text format?

[AEK]

I guess you mean IBE activation e-mail, yes if it is intercepted it can be used by other person, but this mail is sent from your MTA to the remote MTA of the receiving domain, and it is done via an encrypted TLS tunnel with a certificate signed by a trusted CA. There can't be any unknown MTA between them or before them or after them, all MTAs in the path are known, some owned by you and some owned by him. So if any MTA is not encrypting the message it will be either his fault or your fault.