3 ms·
> We insist on https, so why are we ok with the current lame security around mail? Think how many points you have to change if you want your email to be encryp
by 6d0debc071 12y ago
> We insist on https, so why are we ok with the current lame security around mail?
Think how many points you have to change if you want your email to be encrypted among your list of common correspondents vs if a website wants to support HTTPs. You have to change a lot more in one go for email to be secure than you do for a given website.
- josho 12y agoYup, it's going to be hard--lets just not bother. I get it, you've got to update SMTP, the mail client, and likely other points (mail storage). But that's no reason not to try. Look at DKIM and SPF--we've maid steps to protect against forgeries.
- 6d0debc071 12y agoI'm not advocating either way, I'm just saying that it's a problem with a higher barrier to clear since it requires far more buy-in to be meaningfully implemented. You can go and encrypt your email right now but unless you get an organisation with an incredible degree of power to back you you'll be sending messages most people can't read and recieving unencrypted stuff in return.