Re: newbie question



You need encryption whose key is not transmitted in MITM-vulnerable or
reverse-engineerable form, much like PGP. It would be best that any email you get be
transmitted to you via PGP. It will sit in your Gmail inbox
PGP-encrypted. You can then
download it as you wish, and decrypt it on your local system.

Not to mention, since it is in your inbox encrypted, it doesn't matter
if your email vendor decides to turn over your emails to any
government agencies when requested.

Of course, that doesn't prevent the agencies from bringing you in and
leaning on you for the keys. I've seen truly paranoid people keep
keys / data stores in hidden truecrypt volumes to add another layer.
It just depends on the threat model.

Then again, a lot of information can be derived by who emails who, and
what the "flow of the conversation" is. None of these solutions
prevent your recipients from forwarding the emails on clear text
either.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • RE: Encrypted emails
    ... then a PGP product called PGP Universal might be a good solution for you. ... management and encryption/decryption of emails - it occurs transparent to ... cool things with SSL collection of emails for external users who don't have ... Using public/private keys seems like a whole lot of problems... ...
    (Security-Basics)
  • Re: PGP inconvenient? Re: Access to Vigay.com
    ... The writing itself is unimportant - indeed, I PGP the most trivial ... emails and indeed completely random ones sometimes. ... In other threads you've spoken out against spam as ... much as you are now promoting routine use of PGP. ...
    (comp.sys.acorn.misc)
  • OUTLOOK from PGP 8 to PGP 9
    ... I have PGP 8.0 and tons of emails in outlook 2k already encrypted. ... I understood that pgp 9 decrypt emails before arriving inbox but how I will ... LOOKOUT will have all encrypted emails (shame ...
    (microsoft.public.outlook)
  • Re: OUTLOOK from PGP 8 to PGP 9
    ... This is not an Outlook issue but one with PGP - contact them for assistance. ... | I have PGP 8.0 and tons of emails in outlook 2k already encrypted. ... | OUTLOOK and passphrasses are remembered, LOOKOUT will have all ...
    (microsoft.public.outlook)
  • Re: OUTLOOK from PGP 8 to PGP 9
    ... Surley if you've a Q re PGP then you should be asking PGP support ... I understood that pgp 9 decrypt emails before arriving inbox but how I ... I am not good for coding so I would prefer spending money on some tools, ...
    (microsoft.public.outlook)