It is often encrypted, but since the encryption is negotiated using STARTTLS it can easily be stripped by an active attacker. It works fine against passive attackers.
It is often encrypted, but since the encryption is negotiated using STARTTLS it can easily be stripped by an active attacker. It works fine against passive attackers.