Re: Secure email



Security Freak <SecurityFreak@xxxxxxx> (07-02-28 20:43:17):

I have been looking at neomailbox and a few other "secure"
web-based email services.

Neomailbox: https://neomailbox.com/

Secure mail is generated locally using your private key to sign your
mails, and public keys of others to encrypt them. Things like
Neomailbox only secure the connections between you and the server.
That's it. Firstly, most email providers allow that, and secondly,
it's almost useless.

The reasons are simple: The administrators of Neomailbox are still
able to read your mails, as well as any other person potentially
between Neomailbox and the intended receiver. Even if the mail goes
from a NMB user to an NMB user, still the NMB administrators are
able to read the mails.

Use proper encryption and signature schemes. Have a look at PGP [1]
or GnuPG [2]. The latter is more difficult to use, but I trust it
more than PGP, for whatever reason. Maybe because PGP is an
american product, and because it's commercial (it's still free of
charge). However, that's a matter of taste.

You could also look at IronMail from SecureComputing
http://www.securecomputing.com/index.cfm?skey=26
Gartner Leaders Quadrant for E-Mail Security Boundary

Essentially the same useless crap as Neomailbox. You'll want to read
more carefully.


Regards,
E.S.
.



Relevant Pages

  • Re: Secure email
    ... Secure mail is generated locally using your private key to sign your ... mails, and public keys of others to encrypt them. ... Neomailbox only secure the connections between you and the server. ...
    (comp.security.misc)
  • Re: Secure email
    ... Secure mail is generated locally using your private key to sign your ... mails, and public keys of others to encrypt them. ... Neomailbox only secure the connections between you and the server. ...
    (comp.security.misc)
  • Secure email
    ... I have been looking at neomailbox and a few other "secure" web-based ... email services. ... A concern I have is protection against key loggers, packet sniffers, ... Neomailbox talks about something called an iKey. ...
    (comp.security.misc)
  • Re: Encrypted Mail
    ... > I'm looking for a solution to encrypt my mails and to ... you can encrypt the email, ... send the encrypted email to, has to have your public key. ...
    (Security-Basics)