Taking a moment to mention that it’s not hard to set up PGP for your emails, and most desktop clients that I’ve randomly looked at support it
chaotic_disorganizer@lemmy.world 3 weeks ago
yeah, but it wouldnt have been true. unless you encrypt your emails, they are inherently insecure, and all it takes is one subpoena.
klymilark@herbicide.fallcounty.omg.lol 3 weeks ago
chaotic_disorganizer@lemmy.world 3 weeks ago
Yes, but then everybody you wish to talk to also needs a PGP key, and GPG, the most common PGP impldmentation isn’t actually that secure. It still supports dedeated encryption algorithms and some nasty exploits.
klymilark@herbicide.fallcounty.omg.lol 3 weeks ago
Yeah, those are bigger issues. It’s still easier to find people who’re using PGP than your specific email provider, though. Your friend using gmail can use pgp via a client.
I’ve heard of the exploits, but the ones I’ve heard of do typically require the hackers/whatever to have the emails (either via intercepting them as they’re traveling, or getting them from the server), then injecting some HTML, then emailing the emails back to you to trick the server/client to sending the unencrypted emails back? While I don’t use email for much, and my threat model involves much more “Google” than “The government”, I’m not sure how much of a concern this would be for people who’s threat model isn’t that high?
(Admittedly this is also the first I’m hearing of the exploits. I don’t tend to use PGP for my emails, since I don’t send that many emails anyway)
nymnympseudonym@piefed.social 3 weeks ago
If the server is hosted on an .onion it can be hard to know where that subpoena should go
chaotic_disorganizer@lemmy.world 3 weeks ago
Can you send emails to normal email servers from a .onion address? do email providers even allow any conndction like that?