"Before transport" at least minimizes the damage if the email is sent to the wrong recipient.
Doesn't really help, because most of email clients do encryption automatically. Which means that then the message is encrypted to wrong recipient as well.
Doesn't really help, because most of email clients do encryption automatically. Which means that then the message is encrypted to wrong recipient as well.
I was referring to the case where the email is redirecting to (or through) an unintended recipient.
Before my comment is further misinterpreted, let me make clear:
I am not saying "Do not use SSL/TLS." By all means use it; regardless of the bugs, the complexity and the lack of an acceptable authentication mechanism.
But encrypting before transport is even more important, IMO. And so that is a more interesting statistic.
The two are not mutually exclusive.
Not to mention one could use SSH for encryption "in transit". It has better authentication than SSL/TLS, but that's only my opinion.