• bunchberry@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    Email was never designed to be secure. It’s one of the most non-secure ways of communication possible. It heavily relies on trust, for example, nothing about email prevents you from forging who it is from, you can send an email from epstein@fbi.gov and it will arrive in a person’s mailbox just like that. Email also has no built-in encryption. The security of email thus has to be enforced by centralized parties, establishing their encryption standards and networks of trust. It’s just a problem with email itself. People should just abandon email for secure communication. If you really need to send something securely then send it over a Matrix server or something that guarantees end-to-end encryption and can be hosted by anyone.

    • nova_ad_vitum@lemmy.ca
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 day ago

      You don’t technically need a centralized authority to encrypt email. You can do it at the client level and use some form of public key encryption. You will however have to manage your own private key, and recipients will have to be willing to actually use the system you devise. That’s always the hard part.

      • bunchberry@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        Everyone managing their own private key opens it up for man-in-the-middle attacks. That’s why certificate authorities exist.

      • Chakravanti@monero.town
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        1 day ago

        GPG is not fucking hard. People just like being eaten by parasites. Like Proton. Tuta is Open Surce. Nobody has a fucking clue what Proton claims to be.