<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Sorry, pet peeve of mine, HIPAA<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>For security you have to worry about transport & at rest security. Secure mail typically means secure transport. Security at rest would require an encrypted message in your inbox which you would need to decrypt every time you access it. Transport security is easy and security at rest is hard.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>Hidden-discuss <hidden-discuss-bounces@lists.hidden-tech.net> on behalf of Christopher Parker via Hidden-discuss <hidden-discuss@lists.hidden-tech.net><br><b>Reply-To: </b><conductorchris@yahoo.com><br><b>Date: </b>Wednesday, April 8, 2020 at 5:12 PM<br><b>To: </b><hidden-discuss@lists.hidden-tech.net><br><b>Cc: </b>Christopher Parker <conductorchris@gmail.com><br><b>Subject: </b>[ADV] Re: [Hidden-tech] Favorite Secure Email Service<o:p></o:p></span></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p>I don't know your situation. But as a user I've just about had it to here with "secure" email solutions. They are always a headache and always cause me to do all kinds of not secure things in order to use them. You may not be in a position to do so, but if you can, I hope you would consider just how much security is really necessary. For example, I really do NOT want to get my health care stuff on some kind of "Secure" email. The likelihood of something going astray is small and inconsequential. Banking information though, I understand. I also understand that health care providers are working within HIPPA requirements and that other people have circumstances, abusive relationships and so on that necessitate security.<o:p></o:p></p><p><o:p> </o:p></p><div><p class=MsoNormal>On 4/8/2020 11:25 AM, Stephen Michel via Hidden-discuss wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div id=geary-body><div><div><p class=MsoNormal>Very short version: *Probably* the best thing is to use Signal, not email.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Short version: Email isn't secure. I can write (or better, link to) a longer explanation of why that's the case, but the bottom line is that it just wasn't built for privacy. You *can* build a secure system on top of email, by encrypting things before you send them through email using a different tool (pgp), and then decrypting them on the other end. But that's hard for most people to set up and still lacks a couple important security features (forward secrecy, metadata security). There's also providers like protonmail which add a *little* security. While acknowledging that something is better than nothing, there's still flaws in these systems and you shouldn't think you're getting strong security from using them.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Longer version (in a follow-up email): This question as it stands is impossible to answer well, bec ause security is a spectrum. Edward Snowden, the president, and you all have very different security needs. In order to arrive at a good answer, you need to figure out your security model.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>- Who do you want privacy from? Random everyday people? Friends? An abusive ex/partner? The government? A hacker? For whoever it is, are they doing it en masse or targeting you specifically?<o:p></o:p></p></div><div><p class=MsoNormal>- Who will you be communicating with? If it's an elderly parent/grandparent, you need something simple enough that they can use it. Otherwise, it doesn't matter how good the security is.<br>- What information are you trying to protect? Is it just the contents of the conversation, or also the people you're talking to (eg, a whistleblower contacting a journalist needs this).<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>For most "regular" people, I think Signal is a pretty good fit, and that's why I recommended it given I know nothing about your use case.<o:p></o:p></p></div></div></div><div id="geary-sig nature"><p class=MsoNormal>--<br>I try to write short, functional emails.<o:p></o:p></p></div><div id=geary-quote><p class=MsoNormal><br>On Wed, Apr 8, 2020 at 08:38, Christine Dutton via Hidden-discuss <a href="mailto:hidden-discuss@lists.hidden-tech.net"><hidden-discuss@lists.hidden-tech.net></a> wrote:<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Hello Hidden Tech Folks: <o:p></o:p></p><div><p class=MsoNormal>Please recommend free favorite secure email services. <o:p></o:p></p></div><div><p class=MsoNormal>Thank you!<o:p></o:p></p></div><div><p class=MsoNormal>Christine <br clear=all><o:p></o:p></p><div><div><div><div><div><div><div><p class=MsoNormal><b><span style='color:#45818E'>Christine Dutton</span></b> <o:p></o:p></p><div><p class=MsoNormal><b><span style='color:#45818E'>Dutton Consulting </span></b><o:p></o:p></p></div><div><p class=MsoNormal><b><span style='color:#45818E'>413-626-6377</span></b><o:p></o:p></p></div><div><p class=MsoNormal><b><span style='color:#45818E'>Find me on Facebook <a href="https://www.facebook.com/duttonconsulting/" target="_blank">here! </a></span></b><o:p></o:p></p></div><div><p class=MsoNormal><b><span style='border:solid windowtext 1.0pt;padding:0in'><img border=0 width=66 height=66 style='width:.6875in;height:.6875in' id="_x0000_i1025" src="cid:~WRD0000.jpg" alt="Image removed by sender."></span></b><o:p></o:p></p></div></div></div></div></div></div></div></div></div></div></blockquote></div><p class=MsoNormal><br><br><o:p></o:p></p><pre>_______________________________________________<o:p></o:p></pre><pre>Hidden-discuss mailing list - home page: <a href="http://www.hidden-tech.net">http://www.hidden-tech.net</a><o:p></o:p></pre><pre><a href="mailto:Hidden-discuss@lists.hidden-tech.net">Hidden-discuss@lists.hidden-tech.net</a><o:p></o:p></pre><pre><o:p> </o:p></pre><pre>You are receiving this because you are on the Hidden-Tech Discussion list.<o:p></o:p></pre><pre>If you would like to change your list preferences, Go to the Members<o:p></o:p></pre><pre>page on the Hidden Tech Web site.<o:p></o:p></pre><pre><a href="http://www.hidden-tech.net/members">http://www.hidden-tech.net/members</a><o:p></o:p></pre></blockquote><p class=MsoNormal>_______________________________________________ Hidden-discuss mailing list - home page: http://www.hidden-tech.net Hidden-discuss@lists.hidden-tech.net You are receiving this because you are on the Hidden-Tech Discussion list. If you would like to change your list preferences, Go to the Members page on the Hidden Tech Web site. http://www.hidden-tech.net/members <o:p></o:p></p></div></body></html>