Hello Paul,

On Sun, 10 Sep 2017 09:55:48 +1000 GMT (10-Sep-17, 06:55 +0700 GMT),
Paul Berger wrote:

JSL>>>>>> I recently had to supply my accountant with my banking information 
via email.
JSL>>>>>> Fortunately the account in question rarely has more that $2000 in it 
so even if
JSL>>>>>> the message were intercepted, I wouldn't lose very much. The account 
has no
JSL>>>>>> overdraft protection.

JSL>>>>>> So I wondered, is it possible to send an encrypted email to someone 
who has no
JSL>>>>>> encryption in use on his email client? If so, how?

PB>>>>> I use 7-zip to create a self-extracting zip file wilth password and
PB>>>>> then email it.

JSL>>>> But then don't you have to give the recipient the password? I must be 
missing
JSL>>>> something.

PB>>> Yes - you are quite right- I do this in a separate email.

JSL>> It seems that if the encrypted email was intercepted wouldn't you assume 
that
JSL>> the subsequent password email might also be intercepted?

JSL>> Regarding 7-Zip; is it necessary to use a zipping program in order to
JSL>> password-protect a file or files? Is there no way from within TB! to 
encrypt an
JSL>> email without zipping it first?

JSL>> Thanks for your patience with this.

> Thank you, Jack.

>  Yes - there is a facility to use PGP. It would need putting
> in time to relearn how to use it.

> I normally use encryption at the end of each month when backing up all
> my data onto cloud storage like mega.nz.. So am used to it.

> https://mega.nz/login

> You are quite right - I would need to tell the recipient the password
> verbally or by separate email (a bit of risk there as you say).

I agree that the password should be sent by another means - we used to
use fax, but SMS or a chat program will do, or, as you say, the good
old phone.

However, encrypting anything means that nobody who does not have the
password can decrypt it. So, the accountant needs the password, hence
it has to be transmitted. And he also needs the software to decrypt
it, be it 7zip or PGP. Probably too much for a one-time use.

What I did when I had to send log-in data to one of my company
accounts to an accountant is that I sent him the login by email and
the password by another means. So he did not need to install any
software and learn how to decrypt. This is not as safe as sending him
the login by encrypted mail, but even if encrypted, I would not send
the login and the password on one single email.

Just my two cents.

-- 

Cheers,
Thomas.

Message reply created with The Bat! 7.4.16.33 (ALPHA)
under Windows 10.0 Build 15063 


________________________________________________
Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to