Re: Protection of decrypted data from malicious servers?

On Tue, Mar 25, 2014 at 8:19 PM, James Marshall <james@jmarshall.com> wrote:
> On Tue, Mar 25, 2014 at 4:07 PM, Jeffrey Walton <noloader@gmail.com> wrote:
>>
>> ...
>> > Well, fair enough if it's not in scope, but I think it leaves a
>> > significant
>> > problem unaddressed.  Is secure webmail impossible then?...
>> Yes. The problem is in the protocol, not in the implementations. You
>> can't fix the architectural defects without breaking the existing
>> protocol. You need a new protocol.
>>
>> That's why folks like Silent Circle abandoned support for email. Its
>> literally impossible to secure.
>
>
> Interesting, I didn't know that.  Do you know if any new secure protocols
> are being developed?
It comes up on occasion on some of the other mailing lists. See, for
example, https://www.google.com/search?q=secure+email+replacement+site:randombit.net.

Jeff

Received on Wednesday, 26 March 2014 00:24:48 UTC