Yes, but they could just start signing the mail. There's no reason to encrypt th... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

markild on June 1, 2015 | parent | context | favorite | on: Securing Email Communications from Facebook

Yes, but they could just start signing the mail. There's no reason to encrypt the content if proof of origin is what they want to provide.

Piskvorrr on June 1, 2015 [–]

Signed (and unencrypted) mails are vulnerable to known-plaintext attacks; in other words, it is possible (although not always feasible) to alter their content yet retain a valid signature.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact