Amazon SES

Amazon Says SES Requires TLS 1.2, But Testing Shows It Often Doesn’t – Here’s What to Do If you rely on Amazon Simple Email Service (SES) to send transactional or marketing emails, you may have assumed that TLS 1.2 encryption is now mandatory on every delivery. After all, Amazon officially announced that all SES connections must use TLS 1.2 or higher by June 2026. But recent testing by Paubox suggests that the policy is not being fully enforced in practice. Some emails are still transmitted with weaker encryption, or even without encryption at all. ...

Is Amazon SES Actually Enforcing TLS 1.2? Here’s What You Need to Know A recent investigation by email security firm Paubox has raised questions about Amazon’s Simple Email Service (SES) and its enforcement of TLS 1.2. According to Amazon’s own documentation, SES requires TLS 1.2 for all outbound email connections. But Paubox’s testing suggests that the service still accepts messages sent over older, less secure protocols like TLS 1.0 and TLS 1.1 without rejecting them. This discrepancy has left many developers and IT administrators unsure whether they need to upgrade their email configurations—or whether they already have. ...

Wait, Does Amazon SES Actually Require TLS 1.2? Here’s What We Found If you use Amazon Simple Email Service (SES), you might have noticed a change in the documentation: TLS 1.2 is now listed as required. That sounds straightforward. But a recent set of tests done by Paubox, a HIPAA-compliant email provider, suggests the reality is more nuanced. Their findings show that SES still accepts connections using TLS 1.0 and 1.1, at least for now. So what does that mean for your email setup and security posture? Let’s walk through the details and what you should do. ...