Viewing posts for the category Privacy
Privacy violations in Blind-Carbon-Copy mail
Posted by: Subreption LLC in Security Privacy Cryptography 10 months, 1 week ago Barth and Boneh published in 2005 a great academic paper on the privacy concerns found in BCC mail distribution when deploying cryptography solutions such as PGP/GPG. The issue boils down to the fact that most of the time public key material is publicly available (such as in websites and key servers), thus rendering the entire purpose of BCC useless, especially when contacts being mailed have public key material from other BCC recipients in their key rings.For organizations distributing sensitive information across multiple recipients with complex confidentiality and privacy inter-relationships, the usual (and extremely cumbersome) solution is to create recipient-specific keys or certificates, and carefully selecting these either manually or through mail aliases. Ultimately this approach has several weaknesses and is prone to human error.From their excerpt: Tags: gpg pgpread more / Comments
- < Previous
- 1