Encryption of stored emails

[marcusquinn]

Perhaps just simple full-disc encryption for your servers and access management would cover all this in the most battle-hardened, cpu-efficient and simple way?

[subven]

@marcusquinn FDE does not protect your data during runtime so this does nothing. You also have to somehow enter the encryption passphrase after reboots...not practical at all.

[marcusquinn]

@subven All agreed - next-best alternative to nothing though.

I protect my emails by making sure that I have nothing valuable to say

[tomw]

@mehdi That is true in the case of a malicious admin. But it also places the benevolent admin in the position where they have the unencrypted data in their possession (or if full disk encryption is used, they have the keys).

However for some admins, mailbox encryption could also have benefits in cases where third parties attempt to gain access to data through legal disclosure orders.

As a journalist, I would like to be able to offer email accounts on my Cloudron to my peers. However, I would be uncomfortable being in a position where I might one day have to make a call on the validity of a disclosure order (and/or fight it in court on my users' behalf if I thought it was wrong). For me it would be much better if this responsibility rested with the users themselves.

In short, encryption of stored emails would be an extremely interesting feature for me.

[mehdi]

@tomw Encrypting emails is literally my job ^^ What I'm saying is that this method of encryption would not offer what you are describing : a legal order could force you to implement a way to intercept the incoming emails before they are encrypted. It could even force you to intercept the password used to decrypt the email and decrypt them.

What you are talking about is proper end-2-end encryption, and it's quite hard to do it right

[tomw]

@mehdi And protecting source material is literally my job

I said mailbox encryption could be helpful against disclosure orders - not that it provides protection in all cases.

This is a fast-moving issue and the situation will be different in different jurisdictions and under different threat models.

But here's one data point to illustrate what I'm saying: in Germany, the email provider Tutanota was ordered to intercept future incoming and outgoing emails for a user account. But the previously received and encrypted emails were unaffected:

The Tutanota spokeswoman said the monitoring function will only apply to future emails this account receives — it will not affect emails previously received.

It won't always be like this in every situation. But just as there will be times when legal orders force admins to intercept encryption passwords, there will also be times when courts do not go that far and the encryption remains effective.

In my scenario, the owner of the mailbox would not be anonymous. The purpose of the encryption, for me, would be much more about shifting the burden of responding to a legal request onto the user, rather than attempting to provide a bulletproof technical solution.

[mehdi]

@tomw There's a huge difference, it's that in Tutanota's case, the emails are decrypted client-side. In this proposed process, the emails are decrypted server-side. So basically, you would still be subject to legal orders.

[marcusquinn]

Sounds like these journalists shouldn't be using email.

Could shift the burden onto them by advising them to use email with the assumption it is public data and to move any conversations that need to be kept private to specialists in this area like Signal.

Noting that NO encryption is complete when there are two parties as you cannot always guarantee the security of the receiver.

Then you think, well you could have voice calls over E2E encryption - but the receiver could record calls without knowing.

The ONLY secure communications is face-to-face without any electronics devices. Then, you still have the location data of the users before and after that could cross-reference their meeting to talk offline.

Basically, there is no privacy from a determined spy, which move the best protection to being the legal system, and therefore good access logs and protected multi-location backups beyond reach that could at least be used to hold any information demanders to the highest possible level of standards for their lawfulness in these extraordinary data access endeavours.

[tomw]

@marcusquinn said in Encryption of stored emails:

there is no privacy from a determined spy

Very true. But for a lot of journalistic work, the adversary is not a determined spy.

Different security technologies are appropriate and useful in different circumstances.

[robi]

I've used a non-email based "email" called Confidant Mail which is very good at the journalist type workflow and it supports unlimited file size transfers, E2E.

[marcusquinn]

@robi Interesting. Would that be an app dedicated to that sort of thing? Perhaps there's others?

[robi]

@marcusquinn It's a more general tool as an attempt to fix and replace the issues with Email in general. It does that well.

It just needs adoption.

https://hacker10.com/computer-security/send-email-with-tor-i2p-and-gpg-using-confidant-mail/

https://privacytools.io has other options too