This reads like a very low-effort ad post. Odd for them to tag it as “Privacy News”. The ruling they mention (and don’t link any source or give any info for) was in late 2024. Other courts have since ruled differently.

https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2026/29_K_73...

This seems dubious.

> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.

How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.

The only case where this has much to do with email security is when an email server is breached.

This whole article is a lot of words around very little information.

Maybe someday a real end-to-end encrypted email solution will finally exist.

Until then all we have are solutions that only work between a small handful of providers or "click this link to view your secure message" garage that could just as easily be replaced and faked.

SMTP server-to-server has been plain text since its inception... how do you convince everyone to upgrade or switch protocols/servers to something e2e?

Edit: google is probably the only provider that does starttls...