Wednesday, June 11, 2014

Gmail Just Now Catching Up to PSMail's Encryption Practices

Google has started a transparency report http://www.google.com/transparencyreport/saferemail/ to announce to the public the current encryption status of email. It shows how many email providers do not encrypt messages while in transit (basically while on the network). In contrast, PSMail has been providing network encryption since 2002.  This is true even for email transport to external providers whenever possible.
PSMail enabled this type of opportunistic encryption very soon after our email service was started. We have also been providing the ability for external providers to use encryption when sending emails to PSMail users. (Read more in our website)

Here are a couple of email headers that demonstrate how our emails to and from Gmail have always been encrypted while in transit. This is simply a best practice to help preserve customer's privacy and provide enhanced security.  

Incoming email from Gmail to PSMail:
Return-Path: <XXXX@gmail.com>
Received: from mail-lpp01m010-f52.google.com (mail-lpp01m010-f52.google.com [209.85.215.52])
        by uranus.psmail.net (5.2) with ESMTP id q5A9OkaG018222
        (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=OK)
        for <postmaster@psmail.net>; Sun, 10 Jun 2012 09:24:53 GMT
Outgoing from PSMail to Gmail:
Received: by 10.68.186.2 with SMTP id fg2csp337323pbc;
        Wed, 4 Dec 2013 09:08:42 -0800 (PST)
X-Received: by 10.51.15.130 with SMTP id fo2mr1990472igd.28.1386176921768;
        Wed, 04 Dec 2013 09:08:41 -0800 (PST)
Return-Path: <XXX@psmail.net>
Received: from neptune.psmail.net (neptune.psmail.net. [208.86.255.235])
        by mx.google.com with ESMTPS id qd7si4234467igb.62.2013.12.04.09.08.41
        for XXX@gmail.com
        (version=TLSv1 cipher=RC4-SHA bits=128/128); 

The red data above shows that the communication has been encrypted while in transit over the network. Needless to say, PSMail has been "thinking security and privacy" from it's early phases.
  Private, secure, anytime, anywhere ! 

No comments:

Post a Comment