Timeline for Secure way of sending an email attachment in a user-friendly manner
Current License: CC BY-SA 4.0
19 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 4, 2020 at 15:08 | comment | added | Kate | 1) 3-letter agencies can and do tap the Internet directly from the fiber cables and may already have sniffed the file while in transit (there is https etc but still - they may have backdoor access to the server Prism-style). 2) It is not the same thing. Protecting the contents of the message is not the same as protecting the poster identity. Understandably you might want both. The point is, why trust a sharing platform run by anonymous strangers. Seems to me, end to end encryption is the only proper way to secure the contents. Protecting the sender identity is another thing. | |
| May 4, 2020 at 15:03 | vote | accept | MyCatsHat | ||
| S May 4, 2020 at 15:03 | history | bounty ended | MyCatsHat | ||
| S May 4, 2020 at 15:03 | history | notice removed | MyCatsHat | ||
| May 4, 2020 at 15:03 | vote | accept | MyCatsHat | ||
| May 4, 2020 at 15:03 | |||||
| May 4, 2020 at 15:00 | comment | added | MyCatsHat | @Anonymous Two question: 1) Assuming the sharing platform is not compromised, if any download is secured by a difficult captcha, then it can't be automated, right? 2) Isn't protecting the contents of the message the same thing as anonymity? (The content is sensitive, and has information about me.) Plausible deniability would be a nice add-on, but not a must. | |
| Apr 27, 2020 at 15:22 | comment | added | Kate | "I would assume, since getting the pdf involves some human action, such as filling in a password, that even if my data is collected, it will take too long until a human looks at at and by that time the link will have expired" => this assumption is wrong, everything can be automated. Besides the sharing platform could be an open book to Prism, some alphabet soup agency may have access to the whole server, especially if it's in the cloud. It is not completely clear to me if you are trying to protect the contents of the message, or looking for anonymity (and plausible deniability). | |
| Apr 27, 2020 at 15:02 | answer | added | Graham Hill | timeline score: 1 | |
| S Apr 27, 2020 at 12:55 | history | bounty started | MyCatsHat | ||
| S Apr 27, 2020 at 12:55 | history | notice added | MyCatsHat | Canonical answer required | |
| Apr 24, 2020 at 17:28 | answer | added | user10216038 | timeline score: 1 | |
| Apr 24, 2020 at 16:24 | comment | added | MyCatsHat | @mti2935 Interesting tool - but it's not practical for my use case, since the recipient of my email will also have to register. (Also, I need to trust that website, which rather creates another vector of attack...) | |
| Apr 24, 2020 at 16:19 | comment | added | MyCatsHat | @Shadur yes, but there must be something that can be done that is still user-friendly, while being at least a bit more secure than the current status quo (even if that solution is still not really 100% secure) | |
| Apr 24, 2020 at 16:18 | comment | added | MyCatsHat | @Valentin it is not feasible since I only have the email contact | |
| Apr 23, 2020 at 11:32 | comment | added | mti2935 | You might want to look at encryptedsend.com. You can use this tool to send your file to the recipient with end-to-end encryption, and it's simple to use. | |
| Apr 23, 2020 at 8:29 | comment | added | Shadur-don't-feed-the-AI | "secure" and "user-friendly" often find themselves diametrically opposed. Email is one of those cases. | |
| Apr 23, 2020 at 8:20 | comment | added | Valentin | Have you thought about using a secondary channel for the password exchange? e.g. via Phone or SMS? | |
| Apr 23, 2020 at 7:51 | review | First posts | |||
| Apr 23, 2020 at 14:40 | |||||
| Apr 23, 2020 at 7:47 | history | asked | MyCatsHat | CC BY-SA 4.0 |