5 ms·
The message envelope cannot be encrypted, so traffic analysis or other kinds of tampering can still be performed on GPG- or CMS-encrypted emails. It'd be like
by xenophonf 12y ago
The message envelope cannot be encrypted, so traffic analysis or other kinds of tampering can still be performed on GPG- or CMS-encrypted emails. It'd be like doing client-side encryption in JavaScript, but all of the HTTP requests and responses go out in the clear. Message encryption and transport encryption are complimentary. They protect against different kinds of attacks.