Skip to main content
Information Security

Return to Question

added 2 characters in body; edited tags
Source Link
Anders
Anders
  • 65.8k
  • 25
  • 185
  • 226

I just sent an email to my colleague. BesidesBesides his eyes &and mine, who can read the body of the message?

Assumptions:

  1. I have a [email protected] address, hosted by Google Apps.

  2. Recipient has a [email protected] address, hosted by MS Office 365/Exchange Online.

  3. We are both using webmail with HTTPS connections to read/write mail.

  4. Google/MS use SMTP with TLS 1.3 (or some cryptographically secure method) for mail transfer  . (thisThis may or may not be really true, but let's assume for this exercise.)

  5. Assume both PC's are not compromised in any way.

  6. Assume hackers,NSA NSA,etc etc can't crack TLS/HTTPS in a reasonable amount of time.

...

Bonus points: AreAre any of these assumptions practically unreasonable? WhyWhy?

I just sent an email to my colleague. Besides his eyes & mine, who can read the body of the message?

Assumptions:

  1. I have a [email protected] address, hosted by Google Apps

  2. Recipient has a [email protected] address, hosted by MS Office 365/Exchange Online

  3. We are both using webmail with HTTPS connections to read/write mail

  4. Google/MS use SMTP with TLS 1.3 (or some cryptographically secure method) for mail transfer  (this may or may not be really true, but let's assume for this exercise)

  5. Assume both PC's are not compromised in any way

  6. Assume hackers,NSA,etc can't crack TLS/HTTPS in a reasonable amount of time.

...

Bonus points: Are any of these assumptions practically unreasonable? Why?

I just sent an email to my colleague. Besides his eyes and mine, who can read the body of the message?

Assumptions:

  1. I have a [email protected] address, hosted by Google Apps.

  2. Recipient has a [email protected] address, hosted by MS Office 365/Exchange Online.

  3. We are both using webmail with HTTPS connections to read/write mail.

  4. Google/MS use SMTP with TLS 1.3 (or some cryptographically secure method) for mail transfer. (This may or may not be really true, but let's assume for this exercise.)

  5. Assume both PC's are not compromised in any way.

  6. Assume hackers, NSA, etc can't crack TLS/HTTPS in a reasonable amount of time.

Bonus points: Are any of these assumptions practically unreasonable? Why?

Tweeted twitter.com/StackSecurity/status/771492594752876544
Source Link
Jon Wadsworth
Jon Wadsworth
  • 692
  • 1
  • 6
  • 13

Who can read my email?

I just sent an email to my colleague. Besides his eyes & mine, who can read the body of the message?

Assumptions:

  1. I have a [email protected] address, hosted by Google Apps

  2. Recipient has a [email protected] address, hosted by MS Office 365/Exchange Online

  3. We are both using webmail with HTTPS connections to read/write mail

  4. Google/MS use SMTP with TLS 1.3 (or some cryptographically secure method) for mail transfer (this may or may not be really true, but let's assume for this exercise)

  5. Assume both PC's are not compromised in any way

  6. Assume hackers,NSA,etc can't crack TLS/HTTPS in a reasonable amount of time.

...

Bonus points: Are any of these assumptions practically unreasonable? Why?