4 ms·
From personal experience, I can tell you that the consequence of this will be that ministries will be using unencrypted and unauthenticated email and SMS.
by VMG 6y ago
From personal experience, I can tell you that the consequence of this will be that ministries will be using unencrypted and unauthenticated email and SMS.
- rmoriz 6y agoAt least in Germany companies and government are required to configure mandatory TLS for SMTP and IMAP so the biggest attack vector is gone. No end-to-end encryption though.
- mercacona 6y agoThe most significant attack vector might be the admin of the email service. In European public institutions, the admins have access to your work account (which is healthy and ok). WhatsApp, it’s the equivalent to share a coffee some blocks far away from the office (which is healthy and ok).
- rmoriz 6y agotrue. Keep in mind that specific industries (e.g. finance) have transparency requirements so end-to-end encrypted messengers are not acceptable (prevent insider trading, collusive behavior, data theft). In private, personal communication, everyone must have the right to use end-to-end encryption but in commercial and governmental communication, there needs to be some archive, accessible on judicial request.
- mioelnir 6y agoOr not. Landesregierung BaWü for example distributes the daily COVID-19 news via Threema.
- VMG 6y agoI didn't say this will always be the consequence, but it will be the typical result.