Why end-to-end encryption (E2EE) is not usually the medium of choice in organisations
Can Cryptshare encrypt end-to-end?
Again and again I am asked whether Cryptshare can also encrypt end-to-end. In such instances, I always ask the counterquestion: What exactly is meant by this? For me, end-to-end encryption actually refers to the end of the communication chain, meaning from client to client.
Why this often turns out not to be useful in practice, the questioners can commonly answer me themselves:
Disadvantages of end-to-end encryption
- Effortful operation, directly on the client
- Requirements: Software, key or certificate on the end device
- No archiving
- No security (malware, data leakage)
- Difficult backup scenarios
- Holiday or sick leave arrangements
- Leaving of the employee. What happens to the private key?
This means
If the transfer from the sender to the digital inbox of the receiving company (analogue: reception/HQ/post office) is secured, internal distribution can then be realised at the receiving company via their existing infrastructure.
Often, users on the receiving side don‘t want to have to use additional software but would rather like to be allowed to maintain their familiar processes.
Advantages of not using end-to-end encryption
Operating costs
Very low operating costs, as the system is centrally managed and you do not have to go back to individual client management, sparing the TCO.
Userfriendlyness
Using the already existing IT security infrastructure on both sides (mail gateway, firewall, content and malware scanning, DLP, etc.), in which a lot of money has been invested, instead of cancelling this by using end-to-end. This is userfriendly and creates acceptance among staff.
Automation
The possibility of the information on both sides to be archived or transferred directly and automated into a central document management system. This leads to an ideal further processing for the user, instead of creating hurdles it accelerates communication.
Adhoc usable
The communication works for external contacts with the onboard resources of their systems and requires no software installation and certificate management. Therefore, communication between people is enabled instead of prevented.
Let us answer your questions about end-to-end encryption
In end-to-end encryption (E2EE), information is encrypted and decrypted directly at the communication partners. For example, a file is encrypted at the sender before it is transmitted. The nodes involved in the transmission (such as service providers) cannot access the encrypted information, but can only determine the sender and recipient information that is necessary for the delivery of the file. Decryption then only takes place after transmission on the recipient side.
Cryptographic procedures are used for encryption and decryption. For example, symmetrical or asymmetrical encryption with public keys and private keys.
The concept of end-to-end encryption is considered very secure and reliably protects information from unwanted access by third parties. Nevertheless, this also results in some practical disadvantages, which we address on this page.
