4 ms·
I mean a simple, user-friendly email service that only stores the emails on user's computers and offers strong end-to-end encryption. Not something necessarily
by notdrunkatall 13y ago
I mean a simple, user-friendly email service that only stores the emails on user's computers and offers strong end-to-end encryption. Not something necessarily for me, but something that I could build and market as a truly secure email and offer to the world.
- e12e 13y agoIf you want actual email (smtp), the only way to guarantee end-to-end encryption, is to encrypt and decrypt on the client (the email sender/reader). There's no real way to make a secure web service for this (As the story with hushmail.com shows). The difficulty with both S/MIME and GnuPG is key/trust-management - an unsolved problem. With S/MIME you can set up certificates internally with e.g: Active Directory. With GnuPG you could perhaps set up/recommend all users to trust a "central" keypair, and use that keypair to sign all user keys. I'd say eg: Thunderbird with a plugin for GnuPG is about as easy as things are going to get -- without some user education (wrt trust) -- you won't actually get any security anyway.