Enabling email confidentiality through the use of opportunistic encryption

Authors:
Simson L. Garfinkel
Affiliations:
MIT Laboratory for Computer Science, Cambridge, MA
Venue:
dg.o '03 Proceedings of the 2003 annual national conference on Digital government research
Year:
2003

Citing 5
Cited 0

Secure messaging: with PGP and S/MIME

Secure messaging: with PGP and S/MIME
The Cuckoo's Egg: Tracking a Spy through the Maze of Computer Espionage

The Cuckoo's Egg: Tracking a Spy through the Maze of Computer Espionage
Takedown: The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaws - by the Man Who Did It

Takedown: The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaws - by the Man Who Did It
PGP: Pretty Good Privacy

PGP: Pretty Good Privacy
Why Johnny can't encrypt: a usability evaluation of PGP 5.0

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8

Quantified Score

Hi-index	0.00

Visualization

Abstract

Software for encrypting email messages has been widely available for more than 15 years, but the email-using public has failed to adopt secure messaging. This failure can be explained through a combination of technical, community, and usability factors. This paper proposes a new approach to email security that employs opportunistic encryption and a security proxy to facilitate the opportunistic exchange of keys and encryption of electronic mail. While it appears that this approach offers less security than established systems that employ certificates, the security is in fact equivalent to today's systems based on PGP, PGP/MIME and S/MIME.