Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). But would there have been a way for Petreaus to protect himself?
I would think tornetwork but that's probably has a lot of backdoors for military. Maybe some proxy setup or private vpn? Would it be possible to use a secure txt message way via phones? Honestly, maybe something as hair-brained as vps account that you ssh into? Would ssh be secure from the US government from a technical pov? If you feel compelled to answer, leave politics out of it.
thx in advance
So the basic facts seem to be the following. I am assuming these facts are given so obviously don't send unencrypted email is a given. Is sending pgp encrypted email ok, though? Is there a better sol'n? Using something as a shared drop with the capability of sending out emails seems to be the big problem, but what would be a good alternative? Honestly, these were both very smart people (and interesting to see the social element as the downfall). Basic Facts (feel free to edit):
- Two people shared a gmail account
- They used the gmail account for sending messages by leaving in the draft folder so that no incoming messages into their regular email accounts nor traces of emails on public servers, sniffed from traffic (and probably a myriad of other things)
- Sounds as if one of them (Paula Broadwell) sent an email to third party (Jill Kelley) who brought to attention of the FBI. Due to nature of email, she raised it to FBI who investigated.
- FBI probably got search warrant on gmail account and based on the email(s) sent by Paula Broadwell and the content in the communication in the Drafts folder, it was apparent that David Patraeus