4 ms·
> JMAP is therefore not introducing any new measures to address end-to-end encryption. It seems like a wasted opportunity to not make E2EE a primary focus of a
by chrysoprace 7y ago
> JMAP is therefore not introducing any new measures to address end-to-end encryption.
It seems like a wasted opportunity to not make E2EE a primary focus of a new email standard. Hopefully there will be standard extensions down the road to add this if JMAP takes off.
- deleted 7y ago[deleted]
- farisjarrah 7y agoI've been reading about this, and there seems to be a lot of debate still on implementing E2EE via the email providers. From what I have gathered most email providers use TLS and encrypt data on disk at rest, but they feel like its pointless to implement E2EE, because by default as 99% of incoming emails are all unencrypted, and 99% of emails need to leave your email unencrypted(otherwise the receiving email party would be unable to read the encrypted message)
- zaksoup 7y agoOn the page they also bring up a great point: a bunch of optimizations allowed by JMAP (including storing attachments as blobs and separating their payloads from other content) wouldn't be possible if the individual messages were E2E encrypted.
- throwawaysea 7y agoHow would spam detection work?
- sliken 7y agoMaybe have a free unencrypted service, then use those users to train the spam detection. Then the spam detection runs client side for paid users.