3 ms·
> Using Gmail (or any SSL-enabled mail server) already affords you those protections. It absolutely does not. What I'm suggesting is end-to-end. With Gmail or
by cantrevealname 12y ago
> Using Gmail (or any SSL-enabled mail server) already affords you those protections.
It absolutely does not.
What I'm suggesting is end-to-end. With Gmail or with SSL-enabled connections, the host (Google in your example) can read your email; the encryption there is only between you and Google.
I'm saying that the key exchange should be from your email client (Thunderbird, Outlook, a browser) to the other person's client. I think it could be made to work even with Gmail if the functionality was built into the browser.
- napoleond 12y agoI didn't read your parent comment as a suggestion for peer to peer ephemeral exchange. In that case you would be correct, but negotiating server less peer to peer key exchange (especially on mobile devices) isn't currently practical. EDIT: s/parent comment/your parent comment