[Last-Call] Re: [Emailcore] Re: E2E encryption "ideal" (was: SMTP threat models, SECDIR Review of draft-ietf-emailcore-rfc5321bis-31)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Nov 03, 2024 at 12:49:47AM +0100, Steffen Nurpmeso wrote:

>     Real mail security lies only in end-to-end methods involving the
>     message bodies, such as those that use digital signatures (see
>     RFC 1847 [26] and, e.g., Pretty Good Privacy (PGP) in RFC 4880
>     [50] or Secure/ Multipurpose Internet Mail Extensions (S/MIME)
>     in RFC 8551 [46])

I take issue with this statement.  To me the mythical "ideal" of E2E
email encryption stands in the way of real incremental progress.

End-to-end encrypted email fails to meet fundamental usability
requirements, (long term retention and search) so much so that it is
essential no longer email.  Only adequate for "instant messaging"
content, or similar ephemeral communication content.

Even if I had a GPG or S/MIME key you could find, and you sent me an
encrypted email I'd most likely delete it unread, and ask for an
unencrypted copy to be sent instead.

-- 
    Viktor.

-- 
last-call mailing list -- last-call@xxxxxxxx
To unsubscribe send an email to last-call-leave@xxxxxxxx




[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Mhonarc]     [Fedora Users]

  Powered by Linux