Poor Johnny still won't encrypt
17 hours ago
- #S/MIME
- #email-encryption
- #PGP
- Email encryption remains cumbersome in 2025, similar to the process in 1998.
- Web-based email dominance has reduced PGP usage, with most services lacking native support.
- S/MIME is more common in enterprises but is poorly supported by Microsoft/Azure.
- Auditors focus on encryption at rest and in transit but often ignore email encryption.
- Low adoption of MTA-STS means most email traffic isn't encrypted.
- Session-based messaging systems like Signal offer better security features than PGP/SMIME.
- Internal communication has shifted to platforms like Slack and Teams, reducing email usage.
- PGP and S/MIME usage is expected to decline further.