2 ms·
e2e encryption with s/mime is the answer, unless y’all think otherwise. I played around with it the other day. Installed actalis/digicert s/mime cert on client
by xyst 1y ago
e2e encryption with s/mime is the answer, unless y’all think otherwise.
I played around with it the other day. Installed actalis/digicert s/mime cert on client. Sent emails between the 2 addresses. Emails decrypted locally on clients but same message sent on webmail client is encrypted/unreadable (besides subject line)
- dylan604 1y agoTony the tiger says "that's grrrrreat." Now, send an e2e encrypted to another email that is not yours and see how long it takes them to understand what you sent. PGP for email has been around for a very long time, and there's a reason it is unheard of by the general public. it is a pain in the ass.
- spacedcowboy 1y agoIndeed it is, for now.
- brewdad 1y agoIt's been going on at least as long as Year of the Linux Desktop. Stop trying to make fetch happen.
- spacedcowboy 1y agoYeah, well, I might know something you don’t :) Remind me: 18 months.
- mr_mitm 1y agoEven Zimmermann appeared to have given up on it. https://www.vice.com/en/article/even-the-inventor-of-pgp-doesnt-use-pgp/ https://www.vice.com/en/article/even-the-inventor-of-pgp-doe...
- waynesonfire 1y agoOr, it's just too good. Why did it take so long to have encrypted DNS? Another example, https, which uses tls for secure communication still manages to leak the domain name because the Server Name Indication in the ClientHello is sent in plain text before encryption is established. The solution, ECH, is no where to be seen. The folks that read your e-mail and monitor your online presence do not want you to use these tools.
- dylan604 1y agohttps took so long because it was so damn expensive. once that expense went away, https became ubiquitous.
- Avamander 1y agoS/MIME on the other hand is supported by majority of common email clients. PGP sucks in other (cryptographic) ways as well. What's difficult is long-term key management. This is being solved in the context of Passkeys and the same infrastructure could be used for S/MIME keys. Provisioning should become significantly easier with ACME for S/MIME, we'll see about that though. Nothing really says it has to be difficult, even for the layperson.
- colordrops 1y agoIt's easier to get someone to install Signal than all of that.
- paxys 1y agoAs a bonus your emails will stay protected from the person you send them to as well.
- mr_mitm 1y agoIf e2ee became common, Google would offer a way to upload your private key or generate it for you (like proton mail does, IIRC), so you can conveniently read your mail in the web client, undermining the whole idea behind e2ee.
- poincaredisk 1y agoDoes it undermine the whole idea? You can just assume that everyone with a @gmail account may be compromised (just like people with work email don't really own their mailbox), and keep your secure communication with the others.
- mr_mitm 1y agoI mean yeah, the point the article is making would be true non the less, so e2ee is not the answer to the problem.