Thursday, July 24, 2008

Email encryption

In this day and age, it is common to have at least one email address for interpersonal communication. We use email to send all sorts of information including sensitive data even though it is natively an insecure medium because of complacency or lack of awareness.
HTTPS only secures your session between your browser and email gateway*. It does not secure the privacy of the email when the recipient logs on via HTTP to read it. What happens if you sent the sensitive email to the wrong party?
GnuPG fills this security gap. It is a tool that offers asymmetric encryption for secure communication. This mode of email encryption is more robust compared to using symmetric encryption where you have concerns over the communication of the password. Asymmetric encryption also offers identity based encryption. Read my guide for more details.

* Gmail is the only free webmail provider that I am aware of supporting the use of HTTPS for whole webmail sessions.

No comments: