Encrypted email is still a pain

Re:Encrypted email is still a pain by NoGravitas on Monday February 13, 2017 @12:54PM (#13637250)

You would still leak unencrypted headers, which in SMTP are numerous and interesting. A client could minimize the useful content of the message headers, but you're always going to have at least the envelope headers available to every intermediate mail host.

I do not know enough to be sure about your point about forward secrecy. You may be right.

[ Parent | on HN ]

Re:Encrypted email is still a pain by e12e on Monday February 13, 2017 @06:08PM (#13639709)

Depends a bit what one considers integration:

https://en.m.wikipedia.org/wiki/Anonymous_remailer

[ Parent | on HN ]

Re:Encrypted email is still a pain by lmm on Monday February 13, 2017 @06:39PM (#13639929)

> you're always going to have at least the envelope headers available to every intermediate mail host.

Sure, so any intermediate server would see who was talking to who. But that's the case with Signal et al as well isn't it?

[ Parent | on HN ]

Re:Encrypted email is still a pain by cpach on Tuesday February 14, 2017 @08:01AM (#13643194)

”But that's the case with Signal et al as well isn’t it?”

No.

”Because your phone will be connecting to Signal’s servers, your cellular carrier can determine whether or not you are using the service. However, your carrier cannot gather any information about the individuals or groups with whom you are communicating.”

Source: https://github.com/WhisperSystems/Signal-iOS/wiki/FAQ#what-a...

[ Parent | on HN ]

Re:Encrypted email is still a pain by lmm on Tuesday February 14, 2017 @09:58AM (#13643869)

Right, but Signal's servers see who you're communicating with, and they're the equivalent of the intermediate mail servers here.

[ Parent | on HN ]

Re:Encrypted email is still a pain by NoGravitas on Monday February 13, 2017 @08:20PM (#13640436)

Currently, yes.

[ Parent | on HN ]