3 ms·
I don't care at all about the privacy and security of the already encrypted and signed blobs that I would be sending to webmail, in this hypothetical scenario.
by pjscott 16y ago
I don't care at all about the privacy and security of the already encrypted and signed blobs that I would be sending to webmail, in this hypothetical scenario. Why would I? They're already encrypted and signed.
The trick is getting encrypted webmail that's actually secure, without also being so hard to use that almost nobody actually does it.
- eli 16y agoIt would be trivial for anyone with access to the webmail provider's server to steal your password and decrypt your mail. So you don't really gain much by having it encrypted there in the first place.
- pjscott 16y agoI was assuming that my private key would be stored locally. And the encryption code, too. As I said, doing this securely and usably would be hard.