View Full Version : [all variants] Email: SSL/TLS vs. PGP Encrypt
timzak
September 18th, 2009, 01:03 AM
Hi, I'm trying to understand something regarding email encryption. I know that using PGP encryption would scramble email content so that only an authorized recipient could decrypt it, but what about the SSL/TLS protocols that, for example, Gmail supports? Do these also offer a measure of encryption so that intercepted emails would be gibberish?
In other words, if one uses SSL/TLS in their email, would using PGP encryption be redundant?
kevdog
September 18th, 2009, 01:14 AM
SSL/TLS encrypts the transport, whereas PGP encrypts the content. I'm not sure of your question or how to answer it appropriately since the two do two different things. They might be redundant given your situation. One thing is certain that your email most likely sits on Google's servers unencrypted ripe for a court supena.
Mister.Vash
September 18th, 2009, 01:18 AM
SSL and TLS are done at the network level and just encrypt the transport stream. Many servers do support it, but it's not something that you can control so you can't count on it being available for every hop. So your message remains the same, it's just the network communications that would be encrypted provided at each hop, both sending and receiving machines support it/have it enabled.
PGP is used to encrypt the content. Content encryption is what you would want to use to be sure that only the recipient would be able to read the message.
timzak
September 18th, 2009, 01:27 AM
SSL/TLS encrypts the transport, whereas PGP encrypts the content.
That's what I was getting at with my question. Thank you both for your elegant answers!
vBulletin® v3.8.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.