2 ms·
> > To access mail on multiple devices, the private key needs to be shared securely between them > This is a non-issue. It can easily be derived from a passwor
by Groxx 10y ago
> > To access mail on multiple devices, the private key needs to be shared securely between them
> This is a non-issue. It can easily be derived from a password
How does that change the equation? You're still exposing the thing-that-decrypts to multiple devices, thus (many!) more threat vectors. Lose one, and you lose them all, which is the point of the claim.
- danielpatrick 10y ago...so use unencrypted email? The point is, some is better than none. More is better than some. So many people here pointing out holes that make it worse than a theoretically perfect system even though it's leagues ahead of where we are now.
- Groxx 10y agoNo, the (implicit) point in the start of the thread is that multiple other encrypted mediums don't leak as much. Use them instead. If you care enough to use encrypted email, you should probably seriously consider abandoning email. (signing is different - that's proof of identity and non-modification, useful in many non-private scenarios)