4 ms·
It doesn't prevent it, no. But the protocol for email as a whole should incorporate it in a simple manner. In terms of "End to End" I would consider the user t
by GekkePrutser 4y ago
It doesn't prevent it, no. But the protocol for email as a whole should incorporate it in a simple manner.
In terms of "End to End" I would consider the user the endpoint, not the device. There's many techniques that can make that happen. But this is more on the receiver side of course.
PGP is obviously not simple. S/MIME is also not simple. This is why nobody bothers using either (though S/MIME is used internally within a lot of corporations).
- cryptonector 4y agoThe only way I can see of retrofitting end-to-end encryption into email is to use DNSSEC / DANE. But this will require new MUAs. DANE for SMTP, however, has created pretty good email security -- hop-by-hop, yes, but it's much better than before.
- tptacek 4y agoIf all you care about is hop-by-hop security, you can accomplish that without DANE (which requires a forklift upgrade of DNS records across the Internet to work) --- this is why Microsoft and Google came up with MTA-STS.