3 ms·
It would be a start, and a decent one, for TLS to be required for all my email transmission. It seems like the providers can do the same thing that Chrome did,
by flerchin 5y ago
It would be a start, and a decent one, for TLS to be required for all my email transmission. It seems like the providers can do the same thing that Chrome did, and put scary security warnings for emails that can't meet encrypted in transmission.
Encryption at rest is another problem, one that I'm not even sure most users want.
- Ekaros 5y agoTLS would be good start. It is insane that not using it would be allowed anymore. At rest also a decent idea. Even if provider have the keys. End-to-End however in system where you need to be able to send message to anyone and expect it to work is rather big can of worms.
- upofadown 5y agoAgreed that TLS between servers should be promoted and enforced more. In practice, something like 90%+ of email is so encrypted now[1]. Things could be better, but they are not bad. With encrypted email, encryption at rest and encryption in flight are the same process. It uses an encrypt once scheme[2] which simplifies things immensely. As a result you only have one level of security to worry about. [1] https://articles.59.ca/doku.php?id=pgpfan:starttls https://articles.59.ca/doku.php?id=pgpfan:starttls [2] https://articles.59.ca/doku.php?id=pgpfan:encryptonce https://articles.59.ca/doku.php?id=pgpfan:encryptonce