3 ms·
Practically speaking using PGP (or any other design of the same type) doesn't work to preserve privacy due to the architeture of email. Pervasive use of TLS fo
by angry_octet 7y ago
Practically speaking using PGP (or any other design of the same type) doesn't work to preserve privacy due to the architeture of email.
Pervasive use of TLS for clients (IMAPS, web clients) and SMTP (STARTTLS) has had a far greater practical impact on securing email. Let's Encrypt has helped in enabling that.
I haven't seen a report on whether GMail warning when domains were not using TLS has had an impact, but it did for me, because I told my accountant he had to get it done or I would change accountants. GSuite actually lets you prevent sending cleartext, i.e. making MitM downgrade attacks cause fail secure, rather than fail open. https://support.google.com/a/answer/2520500?hl=en https://support.google.com/a/answer/2520500?hl=en