S/MIME Encryption Tips

Introduction

Alternative goals: protect only over-the-wire vs. also protect local storage

Issues

• Reading what you've sent
• Reading what you've received

Solutions

• Decrypt before saving, e.g. mutt decode-save and decode-copy commands
• Using business rules: encrypt to message-archival key
• Key escrow - but don't escrow signing certs!