Secure and privacy enhanced email system as a cloud service
Amna Joyia, Abdul Ghafoor, Maryam Sajjad, Muhammad Qaisar Choudhary · 2013
Most of the current email systems focus on the protection of email letters by using different cryptographic standards such as S/MIME, PGP. We analyzed these and found that an attacker can easily track the identities of communicating parties from email header which are normally transported in clear text. Furthermore, this information can be manipulated for malicious purposes like sending spam messages to the extracted user identities, analyzing traffic to extract the behavior of both sender and receiver. All these attacks lead to vivid threat to the user's privacy. This paper describes the design and implementation of a secure and privacy enhanced email system which provides solution to ensure the privacy of its users. A completely different approach is taken to provide protection to user's identitfy information and sensitive data using infrastructure level services for managing and exchanging anonymous identities. Furthermore the solution is compatible with existing system so any sort of change in the current system is not required.