German court rules: Emails must be end-to-end encrypted

https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2026/29_K_73...

> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.

How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.

The only case where this has much to do with email security is when an email server is breached.

This whole article is a lot of words around very little information.

Until then all we have are solutions that only work between a small handful of providers or "click this link to view your secure message" garage that could just as easily be replaced and faked.

Edit: google is probably the only provider that does starttls...