News for hackers. Stuff that matters.
Re:Stop Using Encrypted Email by yread on Thursday February 20, 2020 @03:38AM (#22373629)
What is better than (S)FTP? Or do you mean MFT, AS2?
Re:Stop Using Encrypted Email by whoopdedo on Thursday February 20, 2020 @08:14AM (#22374809)
SFTP shares only those three letters with FTP but is otherwise a completely different protocol.

It's also a counterpoint to one of the OP's points which is that trying to secure email is a dead-end that we should give up on. It may be possible, though very difficult, to transition to secure email. But it would have to be a brand new protocol not tacked-on to the current system. The way that SFTP is the appropriate upgrade path for FTP and not FTPS.

Re:Stop Using Encrypted Email by jimktrains2 on Thursday February 20, 2020 @09:06AM (#22375111)
The interface of sftp is largely the same as ftp. You can give someone an sftp client, username, and password and they wouldn't be able to tell the difference.

A new e2e protocol that works just like email does would be excellent, but we don't yet have that. Signal &co are chat apps with a different feel and purpose and other than matrix and xmpp not federated, which is a non starter for many entities.

Re:Stop Using Encrypted Email by angry_octet on Thursday February 20, 2020 @09:17AM (#22375185)
Yes I hope it is SFTP and not FTPS.

There are some things we could easily give up to get encrypted mail. For example, setting a max delivery time to allow ephemeral keys.

But there are other problems with encrypted messaging, and I'm particularly thinking of spam. How does Signal/WhatsApp manage to keep a lid on it? Would that be possible in a federated system?