3 ms·
In Denmark, due to the GDPR, almost non of the digital letters we receive from the government can be sent by email (since they would contain personally identifi
by m12k 7y ago
In Denmark, due to the GDPR, almost non of the digital letters we receive from the government can be sent by email (since they would contain personally identifiable information such as Social Security Numbers), so instead we just get a notification by email that tells us to log into a special 'secure' hosted mailbox. Except it's not hosted by the government, but some company that won a contract to build and host this - but now it's going to be built and hosted by another company that won the latest contract. This all seems kinda crazy to me, the public paying private companies to build and run one proprietary solution after the other. Does anyone know if there is some modern protocol/system that provides an alternative to email, and guarantees end-to-end encryption and other privacy-improvements?
- secfirstmd 7y agoI'm not quite sure about your characterisation of "due to GDPR" in this instance. Personally identifiable information does and can flow to regular email, though obviously it is better that it doesn't where possible.
- m12k 7y agoReally? It was my impression that not being able to guarantee encryption along the way (basically you might be sending a postcard instead of a letter) made it a non-starter.
- dngray 7y ago> In Denmark, due to the GDPR, almost non of the digital letters we receive from the government can be sent by email (since they would contain personally identifiable information such as Social Security Numbers), so instead we just get a notification by email that tells us to log into a special 'secure' hosted mailbox. I doubt GDPR has anything to do with this. We don't have GDPR in my country and they use offerings from Symantec Encryption Server.