Why our RSA key do not work on Windows

I promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.

However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say "contact@org") :

The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.

What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?

53 points · 5 comments · view on lemmy.world

5 Comments

eleijeep@piefed.social · 3 pts · 284d (3 replies)

How do you handle retention for discovery purposes if every email is encrypted?

menas@lemmy.wtf · 1 pts · 284d (2 replies)

That's a good point. Even without encryption, we found search tools (such as those in thunderbird) quickly overwhelmed with heavy load (1-2 GB). We manage shared mailbox in sorting mail in dedicated subfolders. This is not perfect, but in thoses context, manually check in those sub-folders is better that letting those information clear

eleijeep@piefed.social · 2 pts · 284d (1 reply)

I'm referring to discovery, not search for end-users.

Most countries have regulations for companies to retain all internal communications for discovery purposes in the event that they are involved in a lawsuit.

menas@lemmy.wtf · 3 pts · 283d

Never heard about. According to wikipedia, only the US, the UK and the Ireland are subject to Discovery. Fortunately we are not in this case; we are subject to the GDPR, so if we could strengthen private information send to us, we have to. Furthermore, unions have special protections for their information

menas@lemmy.wtf · 1 pts · 282d

Okay for the record :

  • ECC key work
  • According to one randoms on stackexchange, ECC is as safe as RSA, and now got a patent free implementation ¹²

So it seems that they is no reason to not use ECC instead of RSA in this context