2005/10/19

Webmail encryption

Yesterday, a pro-democracy group went to Yahoo ! Holdings (Hong Kong) Limited to protest against the release of important information about an email to the Chinese law enforcement agency, leading to the arrest of a journalist in China. This has aroused attention on encryption on webmail. Basically, Yahoo mail is web-based and it is not possible to use client digital certificate.

As far as I know, the only solution to encrypt webmail is to deploy PGP (Pretty Good Privacy), a licesned copy charged at US$30. Once the key pair for an email address is generated, it can be used for the whole life time. In my opinion, it is still cheaper than using client digital certificate which requires renewal on an annual basis.

No comments: