[Crypto-chi] Automatically Encrypting all Incoming Email

[Jesse Young]

I had this idea the other day, luckily it exists!

https://grepular.com/Automatically_Encrypting_all_Incoming_Email

The only hitch is that you need to administer your own mail server,
which you can only do with your own your domain. The server need not
retain the email though. Instead, it can forward the encrypted email
to your normal provider. To get the best warrant/search/seizure
protection it should probably reside at your house rather than on a
VPS/Cloud/Colo. It's not as powerful as end-to-end encryption, so the
main benefit is maintaining confidentiality and integrity while the
email is at rest in your IMAP folders. Also, the sender and
their email provider has the plaintext.

The script seems to not sign the emails it processes. Signatures in
this application wouldn't verify the sender, but you could determine
if the email passed through your filter, or if the email landed in your
inbox some other way.

Is this be something people would be interested in doing during office
hours? We could potentially configure cryptoparty-chi's Mailman server
to sign/encrypt it's outgoing emails to the subscribers in it's
keyring. There wouldn't be much of a point except that you get to see
encrypted emails in your inbox that aren't test messages.

Jesse
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://sshchicago.org:8082/pipermail/cryptoparty-chi/attachments/20141016/87506221/attachment.sig>