Email Encryption Issues
The cluster discusses why email lacks end-to-end encryption, its inherent insecurity due to plaintext transit and interoperability needs, and challenges like PGP key management and protocol inertia.
Activity Over Time
Top Contributors
Keywords
Sample Comments
What's the point if email's still plaintext in transit?
Email isn't private unless it's encrypted :)
Because encrypted email hasn't really worked out?
Because it is a giant pain in the rear. Email is never going to be an end to end secure protocol. Period. It’s never going to be transparent. S/MIME could have gotten the world there but email has too much inertia. Ultimately you have to figure out how to trust keys, that turns out to be the hard part. Use Signal.
Emails aren't encrypted because they have to be interoperable.
People rarely use encryption for email so it's not a top-level feature. If you want to communicate securely with someone use Signal or WhatsApp -- email is the wrong medium. You could send encrypted paper mail too, but that would be equally cumbersome. Choose a medium and tools that already support encryption. It's a bad fit for email, and so got relegated to the obscure settings because almost no one will use it.
Email isn’t end to end encrypted.
lol yes, because signed and encrypted email hasn't been tried.
email is not encrypted... they'll just have your hosting provider or ISP copy your email when it's received/sent
Uh no it's not perfectly secure because if you don't use e2e encryption you only get opportunistic TLS and you can't control whether your mail will be transported over unencrypted connections. Furthermore, the contents of the email arrives unencrypted at every mail server. So you're basically agreeing with exactly what I said ...