Subj : Re: Anyone using PGP/GPG in here?
To : Vk3jed
From : StackFault
Date : Wed Nov 07 2018 07:19 am
Vk> LK> heard they were logging into gmail, writing emails, quitting out befo
Vk> LK> sending, and then a second person would go in and view the saved draf
Vk> LK> No email sent.
Vk>
Vk> That's encrypted via TLS, the weak link is Google itself, of course.
Encryption is a beast by itself. Many focus only on the data-in-transit
aka network stream encryption (the TLS part) and often forget about the
data-at-rest aka storage.
I've seen numerous times people spending countless hours securing traffic,
disabling weak ciphers and setting up strong keys, but keeping the data in
clear on the database backend once received.
