4 ms·
This argument is always a mess. I think a lot of the problem stems from not having a clear definition of what we mean when we say "email". Some of these compl
by cvwright 9y ago
This argument is always a mess. I think a lot of the problem stems from not having a clear definition of what we mean when we say "email". Some of these complaints seem to be about SMTP, some are about client programs, and some are about PGP.
Your individual concerns are all valid, but that doesn't mean they come together to make a compelling argument that email will always be horribly insecure. Heck, you could probably take most of the points in the parent comment, change a few words, and have a pretty solid argument to take back to 2008 and convince everyone that mobile device messaging will never be secure.
There's nothing inherent to the concept of "email" that says we have to use any of these individual flawed components, or that we have to use them together in exactly the same way as we're doing now. For example - What's to stop somebody from taking the Signal code and hacking up support for a mail client that uses Signal with SMTP as the transport?
- tptacek 9y agoLook at X3DH, Double Ratchet, and Sesame and sketch for me a comparably secure system that uses SMTP as the transport and that doesn't reduce SMTP to a tunneling mechanism for an entirely different protocol.