3 ms·
> I highly recommend knowing what sensitive information is stored in your email account and regularly deleting old, sensitive emails that contain PII, financial
by xyst 1y ago
> I highly recommend knowing what sensitive information is stored in your email account and regularly deleting old, sensitive emails that contain PII, financial documents or any other important files.
or begin to encrypt e-mails with S/MIME or GPG. Keep private keys on lockdown and never distribute to web mail clients.
Password breached or brute forced somehow? Great, good luck getting through 2FA that uses OTP. Oh the 2FA used for e-mail account was broken? Now you are in.
Great, now that you are in. All my e-mails are encrypted on server's disk with a mix of S/MIME and GPG. Good luck getting my private keys that I only keep on my local machine and secured behind additional methods of authentication (ie, fingerprint and password authN).
Defense in depth, folks.
- XorNot 1y agoEmails sent to you aren't going to be encrypted.
- anonymousDan 1y agoIs there any well known tool that can be used to scan an email account for PII (like the tools we have for scanning for confidential info in GitHub repos)?
- tredre3 1y ago> Great, now that you are in. All my e-mails are encrypted on server's disk with a mix of S/MIME and GPG. So what? Hiding your old email content might be valuable from a privacy point of view but if you cared about that you'd just delete them from the server to begin with. What a hacker cares about is the ability to receive new emails (password recovery). Those emails are still sent to you in clear text. He might also care about getting a list of past senders (to know what accounts you might have) and that info isn't encrypted by GPG, only the content.