Why our RSA key do not work on Windows
from menas@lemmy.wtf to privacy@lemmy.ml on 17 Nov 14:37
https://lemmy.wtf/post/32551432

I promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.

However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say “contact@org”) :

The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.

What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?

#privacy

threaded - newest

eleijeep@piefed.social on 17 Nov 18:31 next collapse

How do you handle retention for discovery purposes if every email is encrypted?

menas@lemmy.wtf on 17 Nov 18:49 collapse

That’s a good point. Even without encryption, we found search tools (such as those in thunderbird) quickly overwhelmed with heavy load (1-2 GB). We manage shared mailbox in sorting mail in dedicated subfolders. This is not perfect, but in thoses context, manually check in those sub-folders is better that letting those information clear

eleijeep@piefed.social on 17 Nov 19:07 collapse

I’m referring to discovery, not search for end-users.

Most countries have regulations for companies to retain all internal communications for discovery purposes in the event that they are involved in a lawsuit.

menas@lemmy.wtf on 18 Nov 10:59 collapse

Never heard about. According to wikipedia, only the US, the UK and the Ireland are subject to Discovery. Fortunately we are not in this case; we are subject to the GDPR, so if we could strengthen private information send to us, we have to. Furthermore, unions have special protections for their information

menas@lemmy.wtf on 19 Nov 13:00 collapse

Okay for the record :

  • ECC key work
  • According to one randoms on stackexchange, ECC is as safe as RSA, and now got a patent free implementation ¹²

So it seems that they is no reason to not use ECC instead of RSA in this context