3 ms·
Using Gmail (or any SSL-enabled mail server) already affords you those protections. (I'm not trying to be a naysayer, just that the protections PGP provides spe
by napoleond 12y ago
Using Gmail (or any SSL-enabled mail server) already affords you those protections. (I'm not trying to be a naysayer, just that the protections PGP provides specifically go a step beyond what you're describing, which we essentially already have.)
- cantrevealname 12y ago> Using Gmail (or any SSL-enabled mail server) already affords you those protections. It absolutely does not. What I'm suggesting is end-to-end. With Gmail or with SSL-enabled connections, the host (Google in your example) can read your email; the encryption there is only between you and Google. I'm saying that the key exchange should be from your email client (Thunderbird, Outlook, a browser) to the other person's client. I think it could be made to work even with Gmail if the functionality was built into the browser.
- napoleond 12y agoI didn't read your parent comment as a suggestion for peer to peer ephemeral exchange. In that case you would be correct, but negotiating server less peer to peer key exchange (especially on mobile devices) isn't currently practical. EDIT: s/parent comment/your parent comment