A prospective business associate wants me to send an image of an application with some of my important self-identifying information via SMS as an attachment, e.g. image or PDF of the form. This doesn't sound secure to me. I have no reason to believe that the recipient, nor I, has a particular issue with being the subject of a hacker, but in general, this doesn't sound like a good practice. Should I look for an alternate method to send this form?
When the channel is seen as untrusted, a common way is to encrypt the information and send the password over a different channel.
Some examples actually used:
- send the encrypted information by mail or via a web site, and the password on a physical paper send via postal mail
- send the encrypted information by mail, and give the password by phone - this assumes that the phone is not a smartphone than can be used to read the mail...