3 ms·
Why would the solution not be hiding the complexity? TLS "hides" the complexity. It works fine, and it's ubiquitous. The "solution" to E2E encrypted email has
by earthboundkid 9y ago
Why would the solution not be hiding the complexity? TLS "hides" the complexity. It works fine, and it's ubiquitous.
The "solution" to E2E encrypted email has been known for two decades: there should be a system for publicly announcing public keys and privately sharing private keys between trusted devices. It's not rocket science: see Telegram, Signal, Whatsapp, iMessage, etc.
But what those service have that email does not is a commercial incentive to make it all work seamlessly. Email is stuck with a system of half-implemented RFCs and patches for a system designed in the 80s with zero security considerations.
I feel like the only way we're ever going to make progress is if regulators require it. Have the EU mandate that email services with more than 10m customers need to have transparent E2E. Gmail, Outlook, and Yahoo will figure it out about three months after that law is passed.