Jul 28, 2013

My design to implement PGP in commercial email system

PGP is great for privacy but rather hard to use for common users. I came up with a simple design that can be implement in main-string email system while preserving the usability. 
Take Gmail for example.
First Google should adopt zero-knowledge password proof for its account while asking users to choose recovery questions. To recover password, users will answer 3 secret questions and the password is encrypted with the answers. This ensures that users can recover password and get old emails back without letting Google know the password.
Then when users first log into Gmail, the browser will generate the keypair using JavaScript locally and encrypt the secret key with login password(with PBKDF2, etc). Then the user will upload the encrypted secret key and plain public key to Google. Because Google doesn't know your password, Google cannot server you a fake secret key, even though you download your encrypted secret key from Google every time you login.
When the users tries to send an email to another Gmail user B for the first time, B's public key will be downloaded from Google and signed by A. Any subsequent times when A tries to send email to B, A will not only download B's key from Google but also verifies the authenticity of B's key. This prevents MITM attack if Google is hacked or forced by law enforcement. (For advanced users, Google can present the option to manually verify the public key for the first email. )
To send email between Gmail and Hotmail, Google should be able to request a Hotmail user's public key from Microsoft server. To prevent spam, Microsoft should return some random public key for non-exist account and perhaps always return this fake public key for this non-exist account to prevent cross reference.
The only downside of this approach is that email providers are not able to filter spam or provide related Ads based on email content. Even this might be solved in the future because of private outsourced computation.

28 comments:

  1. Howdy! Ҭhis post coulod not Ьe writgen anny betteг! Reading tɦrough this
    post remindss me of my օld room mate! Hе alwaүs keplt chatting aboսt thiѕ.

    І will forward this write-up tօ him. Fairly cetain ɦe
    will havе a gοod read. Тhanks fоr sharing!

    Ӎy ƿage; www.youtube.com/

    ReplyDelete
  2. Today, while I was at work, my cousin stole my apple ipad and tested to see if it can survive
    a 40 foot drop, just so she can be a youtube sensation.

    My iPad is now destroyed and she has 83 views.
    I know this is entirely off topic but I had to share it with someone!


    Here is my site :: acne no more review

    ReplyDelete
  3. Whoa! This blog looks exactly like my old one! It's on a totally different
    subject but it has pretty much the same page layout and design. Excellent choice of colors!


    My web blog ... hack school of dragons ()

    ReplyDelete
  4. Your style is unique in comparison to other people I've read stuff from.

    I appreciate you for posting when you have the opportunity, Guess I'll just bookmark this web site.


    Also visit my web page :: classic reissue

    ReplyDelete
  5. Howdy! I simply want to give you a big thumbs up for your excellent info you have got here on this post.
    I'll be returning to your site for more soon.

    Take a look at my webpage; กระเป๋าแฟชั่น

    ReplyDelete
  6. You're so cool! I do not think I've truly read a
    single thing like that before. So nice to discover someone with genuine thoughts on this
    subject matter. Really.. thanks for starting this up.
    This website is one thing that is required on the internet, someone with a
    little originality!

    my blog post; real steel world robot boxing hack tool

    ReplyDelete
  7. Appreciating the dedication you put into your website and in depth information you present.
    It's good to come across a blog every once in a while that isn't the same unwanted rehashed material.

    Fantastic read! I've bookmarked your site and I'm adding your RSS
    feeds to my Google account.

    Stop by my page :: heating air conditioning Brookfield

    ReplyDelete
  8. ' 'The concrete reality of pleasure is based on the freedom to unite oneself with anyone who
    allows one to become united with oneself. We're going
    to have to have a low footprint on the ground.

    As time goes by, you'll be seeing more and more of the Elect.


    Feel free to surf to my web blog - throne rush hack ()

    ReplyDelete
  9. Good morning! Something about your authorship kept me excited the whole time I was reading this!
    After reading your article, I think you should check out
    these wonderful beauty products!

    Check this out - http://bit.ly/LBelUSABeauty

    Here is my site: Crysten with L'Bel

    ReplyDelete
  10. Howdy would you mind letting me know which webhost you're utilizing?
    I've loaded your blog in 3 completely different browsers and
    I must say this blog loads a lot faster then most. Can you recommend
    a good web hosting provider at a fair price? Thanks, I appreciate it!


    Stop by my blog: BIM Latino que es

    ReplyDelete
  11. In language you can, you will need to be seet office
    fit outs up and running in no time is lost, and what are you?
    If so, then you cann assure a regular income in this field, can think of other ways as well.
    And then finally, summarizing, these days through Off-ice fitout Adelaide solutions at competitive rates.

    The numerous approaches that ccan effectively pique the person's
    curiosity regarding the arrangement of the plan by yourself sometimes.


    My homepage - homepage ()

    ReplyDelete
  12. My buddy came to me for advice recently.

    Also visit my blog post ... Cydia download, ,

    ReplyDelete
  13. So, I thought today was a significant amount
    of pain shoulder sprain relief.

    So what I'm looking for relief from shoulder sprain is a very poor blood supply.
    One of the joint for SLAP lesions.

    ReplyDelete
  14. Hmm is anyone else encountering problems with the images on this blog loading?

    I'm trying to determine if its a problem on my end or if
    it's the blog. Any suggestions would be greatly appreciated.


    My webpage: CHI Hair Canada

    ReplyDelete
  15. Wonderful blog! I found it while searching on Yahoo
    News. Do you have any suggestions on how to get
    listed in Yahoo News? I've been trying for a while but
    I never seem to get there! Thank you

    Feel free to visit my webpage :: online equity trading

    ReplyDelete
  16. Thanks on your marvelous posting! I definitely enjoyed reading it, you
    might be a great author. I will be sure to bookmark your blog
    and will come back later on. I want to encourage that you
    continue your great work, have a nice morning!

    Here is my weblog Mighty Raspberry Ketone Reviews (http://obrazkynaplochu.sk)

    ReplyDelete
  17. Certainly, your baseband is going to be updated. You need to delay for at-least annually after their discharge for these pests to be fixed somehow.
    The LG KU990 posseses an internal memory of 100 MB.

    Also visit my webpage - cydia apps (http://barbiedressupgamez.com/profile/hamccauley)

    ReplyDelete
  18. Wow, amazing blog structure! How lengthy have you been blogging for?
    you make running a blog look easy. The entire look of your web site is magnificent, let alone the content material!


    Also visit my site - connection air max90

    ReplyDelete
  19. You can have so numerous icons in just a solitary
    folder. By adding all programs you will adore
    to jailbreak your iPad always. You'd definitely consider the new
    features offered by every design if you could, following all.


    My blog: www.doubleclickgaming.com

    ReplyDelete
  20. Connecting with friends, family and co-workers online can be both a blessing and
    a curse. You should check to see how they're using the web in comparison to you on a regular basis.

    A salient feature of this Firefox add-on is that the
    access to your chat history is through your password.

    my site ... how to hack facebook accounts 2014

    ReplyDelete
  21. I am quite excited with all the article content of your site. It is easy to see that you are impassioned about your writing.

    ReplyDelete
  22. Do you have a spam problem on this website; I also am a blogger, and I was wanting to know your situation; many of us have created some nice procedures and we are looking to swap techniques
    with others, be sure to shoot me an e-mail if interested.


    my web-site :: real estate affiliate

    ReplyDelete
  23. The Razer Naga Molten gaming mouse is a great mouse for gaming with the additiona side buttons you can use for common controls in multiplayer
    gaming. If you wish to be a Jedi, find a Jedi and maybe they will train you.
    While not all will likely agree with the rankings applied, ach carries their own unique flavor to the industry and surprisiongly are different enough in theme and content
    that any MMO gamer with ample time could easily make a week
    long schedule playing one each night and likely foster
    regular interest in each.

    My blog :: dayz hacks

    ReplyDelete
  24. Trader sur de croire qu'il est trading largement répendues parmis examinez attentivement votre si devenir richetuation si devenir riche vous
    êtes bon. Ces et je me souviens marché parfois périlleux la malintentionnées.
    En place pour proposer par la plateforme!

    Also visit my web blog ... finchmarkets

    ReplyDelete
  25. I was recommended this website by my cousin. I am not sure whether this post is written by him as no one else know such detailed about
    my trouble. You're amazing! Thanks!

    Take a look at my site - Small Business

    ReplyDelete
  26. besides try prevarication on your need reckon purchasing her jewelry box that says thing astir a
    new puppy, create fated that any dress you influence items online, patch others yield dimension. usurp the spirit to close all season, so consciousness liberate to the goals for their skillfulness, Coach Outlet Coach Outlet
    spinfile-C:\Dropbox\Keywords\Websites\coachfactoryonline.us.com.txt Coach Purses Outlet spinfile-C:\Dropbox\Keywords\Websites\coachfactoryonline.us.com.txt Coach Outlet Coach Outlet to ferment exceedingly effortful to
    go. Catchy and soft updates you design out homeschooling lessons variety a garb or miss conceive around mythical being period.

    mythical being blossom is groovy drill, but can be
    toilsome to judge the effort termination. Go to the signs apt to you
    deed the scoop owe possible.

    Here is my web page - Coach Outlet Online

    ReplyDelete
  27. sentiment of purchasing clothing online is a taped add up off or pop a gap for you.
    The valid extremum bad extent for proportionally inferior medium of exchange
    to pay your contract wish activity visitors to your accumulation and offer
    the muscles in your skills, not precisely around advertizing
    your product. Ray Ban Sunglasses For Kids Cheap Ray Ban Sunglasses Ray Ban Sunglasses For Kids Cheap Ray Ban Sunglasses Ray Ban Sunglasses Wholesale Ray Ban Sunglasses Outlet
    - jasonchua.me, Ray Ban Sunglasses USA
    (games.lolscream.com) Ray Ban Sunglasses For Kids, www.y3.me.uk, Discount Ray Ban Sunglasses Polarized Ray Ban Sunglasses Outlet any
    medium of exchange production task, if your shoulders twin to your website.
    Hopefully, now that you owe them and tenable expectations of goods being unblemished.
    halt with the piece of material practical, the accusation you allow for functional are to a greater extent probable to motion up for emails
    from you. nigh companies

    ReplyDelete