I promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.
However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say "contact@org") :
The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.
What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?
eleijeep - 4w
How do you handle retention for discovery purposes if every email is encrypted?
3
menas @lemmy.wtf - 4w
That's a good point. Even without encryption, we found search tools (such as those in thunderbird) quickly overwhelmed with heavy load (1-2 GB).
We manage shared mailbox in sorting mail in dedicated subfolders. This is not perfect, but in thoses context, manually check in those sub-folders is better that letting those information clear
1
eleijeep - 4w
I'm referring to discovery, not search for end-users.
Most countries have regulations for companies to retain all internal communications for discovery purposes in the event that they are involved in a lawsuit.
2
menas @lemmy.wtf - 3w
Never heard about. According to wikipedia, only the US, the UK and the Ireland are subject to Discovery.
Fortunately we are not in this case; we are subject to the GDPR, so if we could strengthen private information send to us, we have to.
Furthermore, unions have special protections for their information
3
menas @lemmy.wtf - 3w
Okay for the record :
ECC key work
According to one randoms on stackexchange, ECC is as safe as RSA, and now got a patent free implementation ¹²
So it seems that they is no reason to not use ECC instead of RSA in this context
menas in privacy
Why our RSA key do not work on Windows
https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Flemmy.wtf%2Fpictrs%2Fimage%2F071c0819-326b-4ab9-a6db-857d05a467a9.jpegI promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.
However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say "contact@org") :
The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.
What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?
How do you handle retention for discovery purposes if every email is encrypted?
That's a good point. Even without encryption, we found search tools (such as those in thunderbird) quickly overwhelmed with heavy load (1-2 GB). We manage shared mailbox in sorting mail in dedicated subfolders. This is not perfect, but in thoses context, manually check in those sub-folders is better that letting those information clear
I'm referring to discovery, not search for end-users.
Most countries have regulations for companies to retain all internal communications for discovery purposes in the event that they are involved in a lawsuit.
Never heard about. According to wikipedia, only the US, the UK and the Ireland are subject to Discovery. Fortunately we are not in this case; we are subject to the GDPR, so if we could strengthen private information send to us, we have to. Furthermore, unions have special protections for their information
Okay for the record :
So it seems that they is no reason to not use ECC instead of RSA in this context