Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for many of the people that would be sending them email. Also, they are unconcerned about the email being encrypted once it is out of the country.

So, what I was wondering is if there is a product or service available (I would prefer a reasonably priced service, but I can host it myself if need be) that would encrypt all their mail at the server using their OpenPGP public key, so everything is encrypted when they download the mail. Also, it would need to allow them to encrypt their outgoing mail, which would them be unencrypted at the email server, and continue on in plain text.

Thanks!

share|improve this question

closed as off-topic by Nifle, DavidPostill, fixer1234, mdpc, Raystafarian Jan 30 at 14:41

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Nifle, DavidPostill, fixer1234, mdpc, Raystafarian
If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers 2

There is software which will do exactly this and also provides an encrypted mailing list functionality, which is what it was originally developed for. The package is called Schleuder and its website is here:

http://schleuder2.nadir.org/

Instructions for using it as a relay between GPG users and other users are here:

http://schleuder2.nadir.org/documentation/v2.2/special_commands.html

share|improve this answer

If encryption is needed only until the data crosses the borders, one way would be to simply set up an off-country SMTP server, enable TLS support in it, then use it for all mail.

Advantages:

  • entirely transparent to other parties;
  • very easy to configure;
  • no additional software or protocols are involved, just standard SMTP and TLS (SSL);
  • the entire connection including message headers is encrypted (PGP only encrypts message body);
  • cheap (approx. $20/mo or even less for a server, if you don't already have one – free otherwise)

Approximate process:

  • obtain a server located outside the country;
  • install a SMTP server (Postfix, Exim4, sendmail);
  • enable connections over TLS, and possibly enable authentication;
  • configure your domain name's MX records to point to the server (for incoming mail);
  • configure your email program to send mail through the server.
share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.