Security Basics mailing list archives
Re: newbie question
From: "Matt Davis" <stackinjection () gmail com>
Date: Thu, 7 Sep 2006 11:23:02 -0500
You need encryption whose key is not transmitted in MITM-vulnerable or reverse-engineerable form, much like PGP. It would be best that any email you get be transmitted to you via PGP. It will sit in your Gmail inbox
PGP-encrypted. You can then
download it as you wish, and decrypt it on your local system.
Not to mention, since it is in your inbox encrypted, it doesn't matter if your email vendor decides to turn over your emails to any government agencies when requested. Of course, that doesn't prevent the agencies from bringing you in and leaning on you for the keys. I've seen truly paranoid people keep keys / data stores in hidden truecrypt volumes to add another layer. It just depends on the threat model. Then again, a lot of information can be derived by who emails who, and what the "flow of the conversation" is. None of these solutions prevent your recipients from forwarding the emails on clear text either. --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINEThe NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- Re: newbie question, (continued)
- Re: newbie question I.C. Weiner (Sep 06)
- RE: newbie question Robert D. Holtz - Lists (Sep 06)
- Re: newbie question security (Sep 07)
- Re: newbie question Rob Creely (Sep 07)
- Re: newbie question Ayaz Ahmed Khan (Sep 07)
- Re: newbie question jm (Sep 08)
- Re: newbie question I.C. Weiner (Sep 06)
- Re: newbie question Colin Copley (Sep 05)
- RE: newbie question Robert D. Holtz - Lists (Sep 06)
- Re: newbie question Muiex (Sep 07)
- Re: newbie question krymson (Sep 06)
- Re: newbie question Matt Davis (Sep 07)
- RE: newbie question Bora Dal (Sep 06)
- Message not available
- Re: newbie question Paul Rochford (Sep 07)
- Re: newbie question Matt Davis (Sep 08)
- Message not available
- Re: newbie question nospam (Sep 07)
- RE: newbie question Tom Crimmins (Sep 07)
- Re: newbie question javier rojas (Sep 08)