3 ms·

I agree. This is a case where some marketing thinking would probably help. Lots of large businesses would probably like something like this (the ones that buy

I agree. This is a case where some marketing thinking would probably help. Lots of large businesses would probably like something like this (the ones that buy rsa keyfobs and use VPNs). My old company would strongly discourage email from the company system to non company email address for security reasons.

bigiain 13y ago
Having said that, many businesses have requirements for employee email that are startlingly close to what the NSA wants. We need info@, accounts@, support@ email addresses that can be read by many people. There also needs to be a way for someone other than Firstname Lastname to read the firstname.lastname@company.tld mail - either for oversight, vacation/illness covering, or hit-by-a-bus scenarios. There are probably certain businesses that have legal requirements about access to employee email. A shortsighted "secure/dark" email approach could easily be dead in the water in terms of corporate adoption if those requirements are not catered for. (I dont use my personal GPG key for any work related or firstname.lastname@company.tld mail, but have a separate GPG key – who's passphrase is in a sealed envelope in the company safe so it can be made available to the company if required without needing to reveal my personal private key. If I'm hit by a bus, or if lawyers/law-enforcemet come knocking on company business - they can have the keys to the encrypted mail in my company account. Mail encrypted to _me_ at nickname@company.tld or me@mydomain.tld is useless if I'm hit by a bus, and would require lawyers/leo/courts to convince me to reveal a passphrase stored only in my head if they wanted it. (Or, you know, for the NSA to rootkit any of my devices I type my personal passphrase into…))