4 ms·
Not technically. You'd just have to apply encryption at a higher level Send email bodies encrypted to base64 along with a public key fingerprint, then receiver
by __s 5y ago
Not technically. You'd just have to apply encryption at a higher level
Send email bodies encrypted to base64 along with a public key fingerprint, then receiver's client would decrypt if it had the private key for that fingerprint
But this isn't compelling enough to get a network effect to topple in-browser gmail
- joshuaissac 5y agoThis could work on top of GMail, with the help of a browser plugin.
- input_sh 5y agohttps://mailvelope.com/en https://mailvelope.com/en
- kodah 5y agoCommon misconception. The three letter agencies do not really need to know the contents of your email body. They're much more interested in to/from, timestamps, and subject. Establishing that you communicate with a person and then getting their emails is much easier than playing with your encrypted email body.
- freshair 5y agoExactly right. The American government considers associations inferred from this "metadata" to be sufficient evidence to execute people via drone.
- stjohnswarts 5y agoOnly foreigners and Americans on foreign soil
- upofadown 5y agoI think this is a common misconception of its own. The three letter agencies would love to be able to see the content of messages. But the code makers have run so far ahead of the code breakers that this is effectively impossible. So they settle for only meta information and tell the people that are funding them that this is now sufficient for them to continue to do their job.
- deleted 5y ago[deleted]
- wolverine876 5y agoWhat is this based on? How do you know their capabilities? Per published reports, they (and others) have exploits for many things, including many cryptography implementations.
- megablast 5y agoThis is just such an obviously ridiculous statement.
- kodah 5y agoFeel free to elaborate. This is fairly common knowledge if you Google parts of what makes ProtonMail (and others) susceptible to state actors.
- stjohnswarts 5y agoYou have a misconception yourself, and it shows. It depends on what they're after. If they want to see an individual's email then obviously they need to decrypt the body.
- PenguinCoder 5y agoBase64 is an encoding, not encryption. But yes PGP or S/MIME encrypted email would work.
- iudqnolq 5y agoCharitably, they mean take the whole message with headers, encrypt it, and base64 it so you can stick it in a body. Probably still a bad idea.