this post was submitted on 11 Mar 2025
19 points (100.0% liked)
Privacy
5679 readers
18 users here now
A community for Lemmy users interested in privacy
Rules:
- Be civil
- No spam posting
- Keep posts on-topic
- No trolling
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Message contents are fairly unimportant. It is the metadata that counts.
Also encrypted messaging is illegal in India
Yeah, this is more of a joke considering most emails are not encrypted. As for illegality - I guess this is just one of the laws a lot of people just have to casually break. I didn't quite understand how exactly the new rules would be enforced, but seems like avoiding passive detection at least would be trivial.
Emails are encrypted in transit but they are not typically encrypted at the mailbox. As for Gpg I would avoid it as it has only uses a single key and if someone gets access to the key they can decrypt stored messages. This is very different than a lot of other encrypted messagers that rotate keys based on an algorithm like double ratchet with old keys being deleted. If you delete a message in a app like Signal there is a very high likely hood that a message can not be recovered even if you device gets compromised later and the adversary stores all data that goes over the internet.
Yes, I understand the limitations of GPG. I myself mostly use OMEMO which does have PFS. However, there isn't really an email encryption scheme that is as widely adopted (and even this is not saying much).