ICO considers SSL/TLS encryption "best industry practice"

It's pleasing to hear the ICO considers that email providers should implement SSL/TLS encryption to protect users' data. POP3 & IMAP passwords are currently sent in plain text to Plusnet servers. About time to get with the times?

In reference to www.theregister.co.uk/2014/03/13/bt_likely_to_have_breached_data_pr...:

The Reg was also curious to know what the watchdog's current guidelines were for companies processing data online where customers are required to log in via a web browser.

We were told that it was considered "best industry practice" to use crypto protocols Transport Layer Security (TLS) or Secure Socket Layer (SSL). Firms are also advised to "provide appropriate security against interception," the ICO spokesman added.

on all my servers I have been ecrypting email for several years, and ofc auth has always been encrypted for as long as I remember.

Really I reccomend people either use their own email servers or specialist email providers, broadband isp's just throw in email as an added value freebie so it wont get the same care and attention. Not to mention you dont want to tie email down to a broadband isp who you may not be with long term.