Re: Secure email

"teabox" <greyteabox@xxxxxxxxx> (07-02-28 15:03:22):

I have been looking at neomailbox and a few other "secure" web-based
email services.

Neomailbox: https://neomailbox.com/

Secure mail is generated locally using your private key to sign your
mails, and public keys of others to encrypt them. Things like
Neomailbox only secure the connections between you and the server.
That's it. Firstly, most email providers allow that, and secondly, it's
almost useless.

The reasons are simple: The administrators of Neomailbox are still able
to read your mails, as well as any other person potentially between
Neomailbox and the intended receiver. Even if the mail goes from a NMB
user to an NMB user, still the NMB administrators are able to read the
mails.

Use proper encryption and signature schemes. Have a look at PGP [1] or
GnuPG [2]. The latter is more difficult to use, but I trust it more
than PGP, for whatever reason. Maybe because PGP is an american
product, and because it's commercial (it's still free of charge).
However, that's a matter of taste.


Regards,
E.S.


References:
[1] http://www.pgp.com/
[2] http://www.gnupg.org/
.

Relevant Pages

  • Re: Secure email
    ... mails, and public keys of others to encrypt them. ... Neomailbox only secure the connections between you and the server. ...
    (comp.security.misc)
  • Re: Secure email
    ... Secure mail is generated locally using your private key to sign your ... mails, and public keys of others to encrypt them. ... Neomailbox only secure the connections between you and the server. ...
    (comp.security.misc)
  • Re: Encrypted Mail
    ... > I'm looking for a solution to encrypt my mails and to ... you can encrypt the email, ... send the encrypted email to, has to have your public key. ...
    (Security-Basics)