Re: opportunistic email encryption by the MTA (not MUA)

2021-01-16 Thread Rich Kulawiec
While I agree pretty much entirely with everything you've expressed, there is another force in the world quietly chugging away to make sure that email privacy remains largely hypothetical...and that is: cloud computing. A lot of people have outsourced their mail service to cloud operations, so e

Re: opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread Randy Bush
fyi, i was contacted by a clue holder from protonmail. my guess was correct. they pointed me to the wkd section of https://protonmail.com/blog/security-updates-2019/ as i responded to them: i am definitely wondering how well it scales. it adds query burden, often toward a server differ

Re: tiny gorillas, was opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread John Levine
In article you write: >It's a real pity that there appears to be no real-world >use/implementation of RFC8689. I implemented RFC8689 as soon as Jim proposed it. My MTA recognizes the REQUIRETLS option and then ignores it. A lot of people who really should know better imagine that they can annou

Re: opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread Brian J. Murrell
On Fri, 2021-01-15 at 10:26 -0500, Bryan Fields wrote: > > It's still stored unencrypted on the server, and the admin can see > all. This is true. I was just referring to transit leakage. > If > you want it secure, you have to run gpg and encrypt the body. Again, true. Cheers, b. signature

Re: opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread Bryan Fields
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/15/21 7:22 AM, Brian J. Murrell wrote: > I think in practice the old adage that "e-mail is insecure" is becoming > untrue, by a significant amount, I suspect, due to the prevalence of > STARTTLS. It's still stored unencrypted on the server, an

Re: opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread Brian J. Murrell
On Fri, 2021-01-15 at 03:33 -0800, Randy Bush wrote: > email from a friend who uses protonmail as their MTA suddenly started > to > be opportunistically encrypted with pgp; i.e. the sender's MUA did > nothing to cause the encryption. i believe this started when i > provided > my pgp public key ove

opportunistic email encryption by the MTA (not MUA)

2021-01-15 Thread Randy Bush
email from a friend who uses protonmail as their MTA suddenly started to be opportunistically encrypted with pgp; i.e. the sender's MUA did nothing to cause the encryption. i believe this started when i provided my pgp public key over WKD [0]. i have a guess. i suspect that protonmail opportunis