@berndkolb How could any attempt at webmail encryption possibly do so "natively"? What would that even mean?
1
@stilkov I'd have a local key and decryption would happen on the client. This is already possible using browser plugins but hard to use
2
@berndkolb Currently doesn't sound like a good business model, sadly. Client-side en/decryption in JS is a possible non-native answer
2
@stilkov e.g when i write an email, an automatic lookup pgp key lookup would happen. i think this needs to be there to make ppl use it
1
@berndkolb I only know this (because we were involved in its design): epost.de/content/dam/dp/doku… (PDF)
1
@stilkov is that pgp based or does it require both sides to be an epost customer?
1
@berndkolb EPOST only. Walled garden approach. But the approach could easily be extended to De-Mail.
1
@stilkov that's not going to help mass adoption unfortunately... It must be as easy as gmail with the option to send unencrypted if needed
1
@berndkolb I agree. Still, having this mandatory in email would be vastly preferable to having it be secure by declaration
Jul 18, 2013 · 10:25 PM UTC
1

