![Thunderbird logo](https://assets-prod.sumo.prod.webservices.mozgcp.net/media/uploads/products/2024-02-12-07-36-53-599028_1.png)
Copying Emails Between Server Accounts - Encryption?
I'm needing to transfer a fair amount of company email from POP accounts to Gmail for Business.
I understand the typical response is to add the gmail IMAP account to TB and copy the messages.
I've tested this feature and it works great. However I'm unsure of the exact mechanism used. Mainly, is this transportation between servers encrypted?
The gmail IMAP account is setup to use SSL/TLS, port 993 and authentication method is normal password.
Can someone confirm these emails will be protected in transit? Thank you in advance.
Выбранное решение
The Gmail setting should be OAUTH2, not normal password. First thing to do is update the gmail account properly. The transfer is encrypted when set up properly. You mentioned the testing went ok. Was that a handful of messages or hundreds or thousands? If doing a lot, I suggest doing in small groups, or create a manual filter to administer the update. And spot check afterwards that complete messages are uploaded.
Прочитайте этот ответ в контексте 👍 1Все ответы (4)
I should clarify above. When I say "between servers" I actually mean between TB on my local PC and the google server since I'm using POP with local messages.
Выбранное решение
The Gmail setting should be OAUTH2, not normal password. First thing to do is update the gmail account properly. The transfer is encrypted when set up properly. You mentioned the testing went ok. Was that a handful of messages or hundreds or thousands? If doing a lot, I suggest doing in small groups, or create a manual filter to administer the update. And spot check afterwards that complete messages are uploaded.
Only a few dozen messages.
OAUTH2 wasn't an available selection during setup process, which was strange. I've selected it now and logged into Google.
I was using the Google app password feature prior to.
Does the lack of OAUTH2 setup make the transfer process somehow lose its encrypted connection despite SSL/TLS being set? Or is it more of a general security best practice to avoid a locally stored password on TB that could be compromised?
Изменено
I am not technical on the encryption technology; my comment was that accounts without OAUTH2 would soon not be allowed by Google.