2 ms·
It's because it's so easy to screw up. With E2E instant messaging the encryption is there by default for everything (in most apps anyway, looking at you, telegr
by rcxdude 4y ago
It's because it's so easy to screw up. With E2E instant messaging the encryption is there by default for everything (in most apps anyway, looking at you, telegram). With email the default is unencrypted and there's so many ways for a user (either the sender or the recipient) to accidentally leak the whole chain in plaintext. So if it's actually important to you to keep the contents secret, email is not a good solution and cannot be reasonably made a good solution.
https://latacora.micro.blog/2020/02/19/stop-using-encrypted.html https://latacora.micro.blog/2020/02/19/stop-using-encrypted....
- seanw444 4y agoI think their point is that it's weird that the email protocols themselves were so insecure, when others got it right fairly easily.
- upofadown 4y ago>With E2E instant messaging the encryption is there by default for everything... The possibility of E2EE messaging is there by default. Most, if not all, base the critical identity verification on the comparison of super long numbers (just like PGP email). Pretty much no one does that, mostly because they don't know the basic concept behind such numbers. Relevant: * https://www.ndss-symposium.org/wp-content/uploads/2018/03/09-when-signal-hits-the-fan-on-the-usability-and-security-of-state-of-the-art-secure-mobile-messaging.pdf https://www.ndss-symposium.org/wp-content/uploads/2018/03/09...