Board:   [fsxNet] Crypto Discussion
Subject: Re: Anyone using PGP/GPG in here?
From:    StackFault(21:1/172)
Date:    Wed Nov 07, 2018 06:19

 Vk>  LK> heard they were logging into gmail, writing emails, quitting out befo
 Vk>  LK> sending, and then a second person would go in and view the saved draf
 Vk>  LK> No email sent.
 Vk>
 Vk> That's encrypted via TLS, the weak link is Google itself, of course.

Encryption is a beast by itself. Many focus only on the data-in-transit
aka network stream encryption (the TLS part) and often forget about the
data-at-rest aka storage.

I've seen numerous times people spending countless hours securing traffic,
disabling weak ciphers and setting up strong keys, but keeping the data in
clear on the database backend once received.


 ──────────────────── ▌ ▀ ───────────────────────────────────────────────────
  Dave aka Stackfault  ▀ ▌▀  bbs.bottomlessabyss.net (telnet/2023·ssh/2222)
  Bottomless Abyss BBS   ▄▀▐ fsxNet»21:1/172
 -··· --- - - --- -- ·-·· · ··· ···    ·- -··· -·-- ··· ···     -··· -··· ···

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
 * Origin: The Bottomless Abyss BBS (21:1/172)
.