4 ms·

One of the concerns with email that article raised was: the recipient can click on "reply" -- without encrypting the reply message -- which would send the respo

One of the concerns with email that article raised was: the recipient can click on "reply" -- without encrypting the reply message -- which would send the response together with the original message "quoted" - all of that unencrypted. This is apparently common operational mistake. Note that this has nothing to do with key exchange, ie putting it on sd card or whatever, would not change anything about the issue raised above. There is also about a dozen other issues that the article lists, worth reading for sure.

stazz1 7y ago
Oh yeah that's a huge flaw in implementation (that probably every main e-mail vendor is guilty of). If it's prevalent enough, then the article is warranted, but the title and the conclusion are still gross simplifications -- it's not like the piping is inherently flawed, it's just that we prefer clear viewing windows to interact with messages, and where these two trains cross is where privacy meets your eyeball and also meets oxygen. Really, all decryption should happen on-device; but we cannot afford to abandon indecipherable messages on a daily or hourly basis in favor of universal privacy. It's somewhat reminiscent of the LOSE_POINTS_TO_LAG flag in quake and setting it to false. Maybe a better title would be Encrypted Email quickly becomes Unencrypted