Author: Jan-Peter Koopmann Date: To: Exim User's Mailing List Subject: RE: [exim] Securing Email for the prying eyes of any government
Hi Greg,
> The "existing techiques" are in fact to use end-to-end
> encryption by using the likes of PGP.
while part of me agrees this obviously leads to new problems. Virus/Spam gateways would cease to function etc. And honestly I do not like the idea of having just one line of defence on the recipient PC when it comes to viruses...
Things like PGP Universal Gateway might help. That of course leaves the problem of mail being stored unencrpyted on the companies mailserver which could be secured with other methods. For starters enforcing SMTP TLS or similar is a good step, isn't it? It makes snooping on messages a lot harder (at least when good crypto algorithms are used), is "easy" to implement at MTA level (at least easier than PGP on all clients etc.) and does not break virus/spam gateways.
