> at rest
So we're talking about after it's received and processed by a server.
> Email is built on top of plain text protocols and messages flow in plain text. If you encrypt, you cannot scan for spam or viruses...
But you can? Just scan and process before encrypting.
> ...index messages for searching
This indeed is a problem. Encrypting emails individually makes search difficult. Why not just encrypt entire hard drives? Encryption at rest is a very broad term.
> or recover messages when a password gets lost. Not to mention the usability issues of changing passwords and encryption keys.
This has nothing to do with email. This is encryption in general, and these security details are a feature.
> Some other providers automatically encrypt messages as they arrive using users’ public keys. That sounds exciting but in practice that means you cannot access your messages using the webmail unless you pasted your private key into a browser, and have it handled by script and a myriad of third party code. Ouch.
Huh? I haven't heard of copy-pasting private keys. Use passwords. But more importantly, this is specific to webmail, not email in general.
So we're talking about after it's received and processed by a server.
> Email is built on top of plain text protocols and messages flow in plain text. If you encrypt, you cannot scan for spam or viruses...
But you can? Just scan and process before encrypting.
> ...index messages for searching
This indeed is a problem. Encrypting emails individually makes search difficult. Why not just encrypt entire hard drives? Encryption at rest is a very broad term.
> or recover messages when a password gets lost. Not to mention the usability issues of changing passwords and encryption keys.
This has nothing to do with email. This is encryption in general, and these security details are a feature.
> Some other providers automatically encrypt messages as they arrive using users’ public keys. That sounds exciting but in practice that means you cannot access your messages using the webmail unless you pasted your private key into a browser, and have it handled by script and a myriad of third party code. Ouch.
Huh? I haven't heard of copy-pasting private keys. Use passwords. But more importantly, this is specific to webmail, not email in general.