2 ms·
Rather than using RSA/public key encryption, I would rather suggest using OpenPGP so that others can encrypt email before it even arrives on the server. Instead
by claudius 13y ago
Rather than using RSA/public key encryption, I would rather suggest using OpenPGP so that others can encrypt email before it even arrives on the server. Instead of generating the private key on each login, it might be better to either a) store it on the server with the password acting as a passphrase or b) store it somehow in the browser/app. It will be interesting to figure out how to transfer it from one device to another, then.
- Ihmahr 13y agoYes, encryption before sending it to the server is possible as follows: Ask server for public key associated with email address, encrypt, send. But if other people do not have this feature for their mail, the mail is encrypted on the server. The server should never directly store the private keys. Maybe more efficient than generating every time again is to use symmetric encryption on the client side to store the assymetric keys on the server in encrypted form.