Server-to-Client Email Encryption

[jtusa]

I understand client-to-client encryption, and server-to-client encryption with SSL sessions and the like. However, I'm wondering how do I go about setting up encryption from my hosted email server (hostpc.com) to my client (Thunderbird). Is there a GPG equivalent for server-to-client? SSL certificate my only option?

 

[Woodie]

It sort of depends...

What underlying protocol are you using for the client to mail-server?
POP3? SMTP? HTTP? IMAP?

SMTP supports transport over TLS (equivalent of SSL)...but it's generally configured for server to server communications.

 

[jtusa]

Currently I'm using POP3.

 

[Zugzwang152]

SSL/TLS requires your email server have a dedicated IP. Does your plan include static IPs? If you're on a shared plan, I'm pretty sure you're SOL.

 

[jtusa]

Originally posted by: Zugzwang152
SSL/TLS requires your email server have a dedicated IP. Does your plan include static IPs? If you're on a shared plan, I'm pretty sure you're SOL.

That's kind of why I'm asking this. I can get a dedicated IP, just have to pay extra for it. That's why I'm wondering if I have any options other than SSL/TLS.

 

[Nothinman]

You need something that works at the transport layer and SSL/TLS are pretty much it. You could use an SSH tunnel if you want and that would require no real extra setup on either side except for changing your mail client to point to whatever port on localhost you setup SSH to use.

 

[RebateMonger]

You could also consider using Hosted Exchange. That'll give you automatic SSL encryption using either Outlook Web Access or Outlook's "RPC over HTTPS". 1&1 has hosted Exchange accounts for around $6 or $7 a month. You might find it just as cost effective as paying for a dedicated IP address, and there are a zillion more features than with a simple POP3 mailbox.