I promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.
However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say “contact@org”) :
The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.
What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?
Okay for the record :
- ECC key work
- According to one randoms on stackexchange, ECC is as safe as RSA, and now got a patent free implementation ¹²
So it seems that they is no reason to not use ECC instead of RSA in this context
How do you handle retention for discovery purposes if every email is encrypted?
That’s a good point. Even without encryption, we found search tools (such as those in thunderbird) quickly overwhelmed with heavy load (1-2 GB). We manage shared mailbox in sorting mail in dedicated subfolders. This is not perfect, but in thoses context, manually check in those sub-folders is better that letting those information clear
I’m referring to discovery, not search for end-users.
Most countries have regulations for companies to retain all internal communications for discovery purposes in the event that they are involved in a lawsuit.
Never heard about. According to wikipedia, only the US, the UK and the Ireland are subject to Discovery. Fortunately we are not in this case; we are subject to the GDPR, so if we could strengthen private information send to us, we have to. Furthermore, unions have special protections for their information