THIS is how email encryption ACTUALLY works (ft. Tuta)

Рет қаралды 5,364

Күн бұрын

When we say that an email is "encrypted," what exactly does that mean? In this live stream, we're talking with Brandon from Tuta about the privacy and security aspects of email and what you need to know to make yours better. Sponsored by @Yubico.
Get $5 off your YubiKey purchase here: www.allthingssecured.com/yubi...
Learn more about email encryption:
▶ Tuta's Encryption explanation: tuta.com/encryption
▶ Tuta's Post-Quantum Encryption: tuta.com/blog/post-quantum-cr...
Learn more about how to secure your email:
▶ Best Secure Email providers compared: • I Tested 5 Secure Emai...
▶ My Account Security Strategy Explained: • My FULL Account Securi...
▶ What is an Email Alias? • STOP Giving Your Real ...
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹Recommended Products & Services🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Introduction with Brandon from Tuta
0:32 - What is TSL Encryption?
3:15 - What is I send encrypted email to Gmail?
4:45 - Advantages: dedicated app of Tuta vs Third Party App
7:19 - Encryption Security of TutalMail
10:15 - What is PGP?
12:27 - Public key and Private Key
13:28 - Challenges of PGP
16:30 - Listing of PGP Public key
19:17 - Symmetric and asymmetric Encryption
21:00 - Post Quantum Cryptography for Email
27:55 - Harvest now, decrypt Later
29:39 - Visible Metadata with encryption
34:05 - Best Practices any kind of email
38:27 - Why choose Tuta?
42:55 - What are Email provider support self destructing emails?
44:41 - Shared password, OTP's and private email password
46:28 - Security Differences of Yubikey and Passkey
54:20 - Can you create second Passkey?
55:47 - Closing Remarks
*********************
Most of us operate under the assumption that the emails we send and receive are private and only available for us to view. But what if that isn't the case? This week we sit down with a security researcher at Tuta to discuss the details of email encryption, which parts of an email are encrypted and what you can do to add greater privacy to your messages.
#onlineprivacy #privacy #email

Пікірлер: 36

@e-vd 7 күн бұрын

This is THE BEST discussion of these topics I've seen anywhere: accessible, relevant, and super helpful. Thank you!!! 🙏

@p.adam.kolodziej Ай бұрын

The video quality on this channel never stops to amaze me. It is inversely proportional to the substantive value.

@AllThingsSecured 29 күн бұрын

I’m not sure that means what you think it means?

@p.adam.kolodziej 29 күн бұрын

@@AllThingsSecured it means that you are doing great job with educating your audience and I enjoy your very informative content, but the quality of your video sucks...

@darrenjosephgregory Ай бұрын

Really enjoyed this, Brandon answered your questions in a clear and simple, yet informative, way. Thanks.

@AllThingsSecured 29 күн бұрын

I agreed. I’m glad you found it helpful!

@jmonger Ай бұрын

OpenPGP solved this years ago, but the implementation was too complex for normal users. I still prefer to generate my own keys and use a desktop client, but that's because I don't want private keys on an external server. Proton has an interesting workaround by securing the key with the user's password, which is probably fine for most people. The benefit of Proton using PGP is it's interoperable with the grey beards who prefer to manage their own keys.

@AllThingsSecured 29 күн бұрын

Thanks for the feedback here, Jared!

@kevinhenryviii Ай бұрын

Great info Josh. Thanks 👍🏻

@AllThingsSecured 29 күн бұрын

No problem 👍

@davidbell7094 Ай бұрын

This is very interesting and important,but a lot of it,goes right over my head?! And yeah a shorter version would be better,if you don't mind me saying!

@AllThingsSecured 29 күн бұрын

Thanks for the feedback, David! I’m trying to make it as easy to understand as possible.

@GlenCoulthard Ай бұрын

Your discussion re: keys 55min leads me to ask: Would you recommend multiple methods for 2FA (e.g., Yubikey, Bitwarden TOTP, Google Authenticator)? If so, how can I add a 2nd or 3rd method to my current authenticator as a backup (if I were to purchase a Yubikey)? Sorry, just concerned about losing my phone or Yubikey (and then what happens ).

@K2HWY Ай бұрын

Can you do a video on how to go about storing passkeys on a Yubikey?

@AllThingsSecured 29 күн бұрын

Great idea 👍🏻

@padraigr9305 Ай бұрын

The problem re how the other person gets the password is a real issue -often I wouldn’t have the other person’s phone number. Often all I want is that I don’t have ads in my email and ensure I am not being tracked. Another uneasy feeling I have is that with the encrypted email companies one may be “rubbing shoulders” with unsavoury actors - I know the companies do not wish to knowingly accommodate illegal use but nevertheless, inevitably , it probably does happen. Do you have any recommendations for ad-free non-tracking email providers - I don’t mind having to pay ? PS great video thanks.

@JohnSebeny Ай бұрын

Gonna give the keys a shot. I just use Authy or Aegis (Duo for work). Ordered 2 keys.

@AllThingsSecured 29 күн бұрын

Enjoy!

@Spike597 Ай бұрын

Audio and video is out of sync.

@AllThingsSecured 29 күн бұрын

Sorry. That’s what’s fun about “live”. I think it eventually caught up.

@crame3396 Ай бұрын

SATX, THX

@AllThingsSecured 29 күн бұрын

👍🏻👍🏻

@melaniestarkey7868 Ай бұрын

Now they tell us.

@AllThingsSecured 29 күн бұрын

Tell you what?

@boondockmutiny9955 Ай бұрын

“We are passionate to offer a privacy-first alternative and to stop surveillance (capitalism).” This is a quote from a Tuta employee on Reddit…anti-capitalism?

@TutaPrivacy Ай бұрын

Hi there, this statement is specifically referring to the growing industry of developing and selling new and increasingly more invasive surveillance technology to governments and businesses. What we oppose is the industrialization and sale of technologies explicitly designed to invade your privacy. We are not making a comment about the wider form(s) of capitalism.

@padraigr9305 Ай бұрын