News for hackers. Stuff that matters.

A comment on Address Verification and Full PGP Support. Parent comment

Re:Address Verification and Full PGP Support by deftnerd on Wednesday July 25, 2018 @02:16PM (#17611466)
Protonmail's method of encryption allows them to encrypt the entire message, including headers/metadata. It also encrypts the messages received that weren't encrypted when they weren't first sent.

Your suggested method basically is no different from any other provider. You rely on the sender encrypting the message and header information is entirely unencrypted on the disk.

[ Parent | on HN ]
Re:Address Verification and Full PGP Support by Sir_Cmpwn on Wednesday July 25, 2018 @02:18PM (#17611486)
>Protonmail's method of encryption allows them to encrypt the entire message, including headers/metadata

I would prefer to see them promote standards to extend PGP rather than invest that time in a new, proprietary system with no buy-in from the email-related-software development community. I can follow the logic but I can also see their eyes lighting up when they realize this is a great excuse for having a proprietary, locked-in platform.

>It also encrypts the messages received that weren't encrypted when they weren't first sent

This could be done with PGP

[ Parent | on HN ]
Re:Address Verification and Full PGP Support by bartbutler on Wednesday July 25, 2018 @02:27PM (#17611583)
Headers are not encrypted in OpenPGP and not in ProtonMail. Message and attachment content is.
[ Parent | on HN ]