3 ms·
They could have just used GnuPG over pretty much any e-mail service?
by antihero 14y ago
They could have just used GnuPG over pretty much any e-mail service?
- rogerbinns 14y agoThat doesn't really help as GnuPG encrypts the message contents, but doesn't hide sender and recipients. In this case they could still have figured out who sent the messages even if they didn't figure out the contents. Then you apply traffic analysis to proceed to the next step http://en.wikipedia.org/wiki/Traffic_analysis http://en.wikipedia.org/wiki/Traffic_analysis The only way they could have avoided detection using GnuPG is if they did something like always sending the same length message at the same time every day.
- elq 14y agoThey left messages in the draft folder - no traffic analysis possible, at least from the messages themselves.
- rogerbinns 14y agoThe message I responded to was proposing an alternative to what was used (draft folder) and instead using GnuPG. However even if they only used encrypted text in the drafts and never sent them, you could still use traffic analysis techniques to help categorize the content (size, frequency etc) assuming the drafts could be read.
- bribriinlondon 14y agoUse PrivateSky - http://privatesky.me http://privatesky.me