undefined | Better HN

0 pointsGekkePrutser4y ago0 comments

It doesn't prevent it, no. But the protocol for email as a whole should incorporate it in a simple manner.

In terms of "End to End" I would consider the user the endpoint, not the device. There's many techniques that can make that happen. But this is more on the receiver side of course.

PGP is obviously not simple. S/MIME is also not simple. This is why nobody bothers using either (though S/MIME is used internally within a lot of corporations).

0 comments

2 comments · 1 top-level

cryptonector4y ago· 1 in thread

The only way I can see of retrofitting end-to-end encryption into email is to use DNSSEC / DANE. But this will require new MUAs.

DANE for SMTP, however, has created pretty good email security -- hop-by-hop, yes, but it's much better than before.

tptacek4y ago

If all you care about is hop-by-hop security, you can accomplish that without DANE (which requires a forklift upgrade of DNS records across the Internet to work) --- this is why Microsoft and Google came up with MTA-STS.

j / k navigate · click thread line to collapse