you are viewing a single comment's thread
view the rest of the comments
[–] 47 points 8 months ago (15 children)

…email will inherently be a lot less secure than messaging, no matter what you do.

If you truly want to be private about something, don’t email it lol

  • source
  • hideshow 15 child comments
  • [–] 14 points 8 months ago (2 children)

    no matter what you do.

    Even PGP?

    ...TBF, getting your counterparty to also use PGP is the heavy lift there.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 8 months ago (1 child)

    Security yes, privacy not especially.

    PGP lets you encrypt the messages and sign them to digitally prove you sent them.

    It doesn't help with the problem here which is that the metadata of who you are (the IP used to log into the webmail and the email address of the sender) and who you're talking to (the email of the recipient) and when (timestamps etc.) were able to be leaked.

    In fact, depending on the implementation, PGP could be considered slightly worse for privacy because you'd have the added identity proof of the message having a signature that only you could create with your private key (although that's encrypted, it's a stronger identity proof than the sender email address). It also generally leaks the recipients' key IDs too (although that's configurable) PGP is great for accountability, message confidentiality and non-repudiation. Not so much for privacy. For that you'd need other systems.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 8 months ago

    People like Jeffrey Epstein running one of the biggest blackmail networks in the planet and at the same time blatantly emailing each other about it from gmail really amazes me. Either they are that stupid or powerful enough that they just don't care.

  • source
  • parent
  • [–] 4 points 8 months ago (6 children)

    Or go talk to the other person out in the middle of a field somewhere without your phones. And I'm not even 100% sure anymore that that would work. Like, maybe the lanternflies are bugged (pun intended).

  • source
  • parent
  • hideshow 6 child comments
  • [–] 2 points 8 months ago (3 children)

    Well I'd suggest a forest instead but anyway depends how you get there :

    • look up online how? there might be now a path on a server to your target destination
    • disconnect phone in a pattern that's usually not how you use it? more surveillance
    • public transport tracking, plate tracking until you leave the city
    • rough estimation on your direction then follow up with drones tracking you, if it's 100m high it's hard to notice

    ... anyway, ending the paranoia comment ;)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 8 months ago (2 children)

    Don't forget facial recognition! Then just in case you decided to wear a mask, gait recognition!

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 8 months ago (3 children)

    Is it really so hard to make it secure? If both parties are using some kind of secure email client, couldn't the clients just encrypt and decrypt the subject/content?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 8 months ago (2 children)

    The main issue is that in reality, 95%+ of people aren’t using an encrypted service. So it’s proton to Gmail usually

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 8 months ago (1 child)

    Sure but this is very similar to messaging isn't it? Like most of my friends use WhatsApp, but a few people use signal and that number is increasing.

    At least with email, a single client could presumably send encrypted emails to others when possible, and regular emails when not. Add opposed to messaging where I cannot send messages from signal to WhatsApp

  • source
  • parent
  • hideshow 1 child comment