|
by Commander Tansin A. Darcos 04/30/2015, 8:35am PDT |
|
 |
|
 |
|
Mischief Maker wrote:
I'm planning to migrate my website from my current server to weebly, but I need an email client that can use my URL and doesn't trawl my clients' emails.
Can anyone suggest a secure email host?
The problem is the U.S. government doesn't really like the idea of private parties having uncrackable e-mail. Lavabit offered this until a court ordered them to turn over their system encryption key. So they did, then the owner shut down the service. Now that's in litigation as to whether someone can decide to close down their service if forced to continue to operate in a manner which they feel violates their conscience.
When people want secured communications the usual straw men are brought out about how why you need to hide things if you have nothing to hide. Fortunately, data breaches and credit card exposures put paid to that old chestnut, so the next step is demonization, tarring those who want to keep things secret with the same brush as terrorists and traders of child pornography.
Just in the last few minutes I thought about this. I think the/an answer is to take the keys away from the service provider. Sender encrypts entire message with their private key and either identifies who sent it so recipient can decrypt it with the sender's public key from their ring or a public ring, or attaches their public key if not known or if using a one-time key. Payload or contents of message are encrypted with recipient's public key, so even if the government seized the content of the servers or the mail provider was bribed, all they'd get are thousands and thousands of separately encrypted messages, all using different and expensive to decode individual keys. And requiring the sender to also encrypt the message reduces the possibility of spam.
|
|
 |
|
 |
|
|
|