Tag Archive for Online privacy

True email encryption: Scryptmail shall show the way

emailencryptiongraphic

In recent months, we at What’s New On The Net have featured or profiled scores of new email services that promise high levels of encryption.

One of our readers, Sergei Krutov contacted us to inform us that many of such services lack server side encryption. Sergei claims to have conducted deep research on email encryption & found many false claims being made by many an email service startup.

He drew the attention of our startup profilers to his blog post wherein he wrote:

Or another point of view, the concept of Server-Side Encryption (SSE) is a totally misunderstood by the public. For example, it simply encrypting the e-mail message before it is transmitted from the server to the recipient.

But obviously, the E-Mail Service provider can easily read your message, words: “We encrypt your message on the server”, should translates into: “ We can read your email in clear text, but believe us, we are the good guys, so won’t do that. We will encrypt your message and destroy the original. So no one, and we repeat no one can read you email except specified recipient.”

sergeiSergei himself is on the verge of beta launching an email service called Scryptmail, so we invited him to explain how his email service would be better than the others on the privacy front. In keeping with our suggestion,Sergei wrote a fresh post in which, besides talking of the launch of Scryptmail, he has explained the difference.

Here’s what he says:

Scryptmail is a brand new email service which offers to you a key benefit known as ‘Frontend Encryption’ (to get more background on this new feature, read here) In giving, the customer, the best service possible, we have followed the best PGP protocol standards for public key exchange. In addition, we have adopted open source javascript libraries to make user side encryption for email communication into a seamless process.

If PGP standards were to be more widely adopted, we would always be contributing more to it, in order to make it more private and secured.

At Scryptmail, we take the firm belief that the concepts of privacy and confidentiality simply cannot be outsourced to a third country.

….in saying all this, we are constantly improving our service to make it better, faster, and more reliable, so you can use Scryptmail for your everyday needs. Before we open our limited registration on November 18th, we encourage you to request an invitation, so you can be amongst the first group of people to test drive our Beta version of Scryptmail.

After this period of Beta testing is over, we will keep inviting more people to use our services, so that we can expand our server load accordingly efficiently and effectively, and also eliminate software bugs as quickly as possible.

If you want to catch up with Sergei’s post, click here.

Editor: We would be happy if our readers join in this conversation on email encryption, or even give some more suggestions, in order to better Online privacy.

Graphic: Pixteller
Image Credit: Sergei Krutov

Advertising Message

Dropbox, Google, others come together to launch service org called Simply Secure

simplysecure

Online storage platform Dropbox, Google, & the Open Technology Fund today have launched Simply Secure, a new organization focused on making open source security tools simpler & easier for people to use.

The aim is to use Simply Secure to bring some of the best minds in security, user interaction research & design together to dedicate resources & brainpower to solving this problem. Although consumer-facing security tools exist & are technically effective, they often have low adoption rates because they’re inconvenient or too confusing for the average person to operate. Even well-known features like two-factor authentication, offered by many Online services, are not widely used.

Led by Director Sara Sinclair Brody, the organization will work with the open source community to develop tools that make it easy for people without advanced technical knowledge to choose better security without sacrificing usability.

“Simply Secure represents an exciting opportunity to bring together diverse groups in pursuit of an important goal: making security and privacy tools more user-friendly. This transparent, community-focused approach is new, and represents a compelling adaptation of the open-source model to interaction design. Usable security has been a passion of mine for the past ten years, and I’m thrilled to be leading such a wide-ranging and well-supported initiative.” Sara Sinclair Brody, Director of Simply Secure

“If technology is secure but impossible to use, is it really secure? It’s a challenge to provide proven, open source tools to the public in ways that meet their high expectations and modern use cases. With its clear mission, an exceptional board, and a community-focused approach, we believe Simply Secure can bring us much closer to a world in which ubiquitous security is the norm.” Meredith Whittaker, Open Source Research Lead, Google

In the coming months, Simply Secure will be collaborating with others on:

  • Researching & developing usability & security auditing practices. How do we measure the two in a single assessment?
  • Bringing usable-security researchers from major institutes in contact with secure-software developers, & building an academic practice focused on practical implementation.
  • Sponsoring usability studies for major secure-communications tools, & working with designers & developers to act on their findings.
  • Convening usability researchers & software developers to identify big problems, & crafting collaborative ideas for solving them.

 

Image Credit: Simply Secure

 

Advertising Message