3 ms·

so like hushmail?

• x5n1 11y ago
  No you need to provide a desktop client, open source, by default with everything configured in addition to the service. I guess you should also let users use other IMAP servers but the client should always encrypt all mails it sends out. Hushmail was always open to court order attack, a desktop client, an open source one, is much less so. It should always put the name of the client in the subject line or send some unencrypted text along with each message on where they can get a client to view the message. And the client should be able to configure itself with minimal input, sort of like Thunderbird does right now with most e-mail services. And generate, transmit, and store your public key to anyone upon request.
  • munin 11y ago
    oh ok. this is actually harder to solve than just 'here have thunderbird'. how do you replicate keys across computers? how do you send e-mail from a new computer when you don't have access to your old computer (it turns out the answer is you don't). how do you back up your keys? where do you store them? there are some high security answers like "ship our users HSMs" but those are very brittle to common failure modes like "i lost it". I think you'll discover that if you try to create something that is both resilient to average negligent use but still encrypted, you'll wind up with something that is basically hushmail.