|
|
|
|
|
by u801e
2892 days ago
|
|
> SMTP and IMAP would require transmitting the password to the server for decryption Why? There's nothing in the SMTP or IMAP specification that I'm aware of that requires that the email be in a decrypted form when stored in a mailbox. When a client fetches the email via IMAP, it can then be decrypted on the client side. On the SMTP side, I could do the following over telnet EHLO test
AUTH PLAIN XXXX
EHLO test
MAIL FROM: <my@address>
RCPT TO: <your@address>
DATA
<encrypted ascii armor text>
CRLF.CRLF
On the IMAP side I can log in and run . SELECT Inbox
. FETCH 1 (BODY[])
which should retrieve that ascii armor text. Then I can decrypt it locally. |
|