3 ms·
It certainly does, but require client software that's capable to decrypt the data. I think almost every desktop mail client support S/MIME. Many support PGP/MI
by drdaeman 9y ago
It certainly does, but require client software that's capable to decrypt the data.
I think almost every desktop mail client support S/MIME. Many support PGP/MIME, using plugin/extension or natively. Unfortunately, the situation is much worse on mobile.
Anyway, if the client software is capable - which is rarely true but sometimes is the case - any classic mail server can store everything encrypted.
If you self-host - just make your MDA pipe the unencrypted emails to GnuPG or OpenSSL (and encrypted emails are already okay) and that's it. You'll be as good as ProtonMail (note: https://protonmail.com/support/knowledge-base/does-protonmail-encrypt-email-subjects/ https://protonmail.com/support/knowledge-base/does-protonmai...). IIRC, there also was some hosted email service that works this way, although I forgot where I saw it and how it was called.
- robin_reala 9y agoRight, I was going by their knowledge base article titled ‘IMAP, SMTP, and POP3 setup’ where they say: At this time Protonmail does not support IMAP/SMTP or POP3 due to the technology ProtonMail utilizes within web browsers to encrypt and decrypt your messages. We apologize for the inconvenience and are working on creative solutions to allow IMAP/SMTP use. https://protonmail.com/support/knowledge-base/imap-smtp-and-pop3-setup/ https://protonmail.com/support/knowledge-base/imap-smtp-and-...
- protonmail 9y agohttps://protonmail.com/bridge https://protonmail.com/bridge
- drdaeman 9y agoOh, that's awesome idea! If it uses IMAP4 variant under the hood and not completely different/proprietary API - are there any plans of possibly releasing this as a standalone tool someday? I don't use Protonmail, because I already have self-hosted own-premises mail system for a long while, but I don't have encryption at rest. Given that you use OpenPGP, this bridge app looks very interesting. If it only could talk to a local gpg-agent as an option (rather than an PM account), it would be probably just perfect.