Contact Me Securely

Use one of these three ways to contact me securely since you never, ever, want to email anyone your private, confidential or important information (unless you use #3 below) since email is NOT a reliably secure method to send stuff you need protected.

Positive SSL

1) Secure Contact Form - Security Level: Minimal

WHEN TO USE THIS OPTION: Use my secure contact form when you just want to send me a quick note and minimal security is acceptable.

HOW IT WORKS: When you send me a message using my contact form your entry is secure (this entire website uses SSL) but the content of your message travels across the internet in the clear. Why? It's because sending anything via email that is not end-to-end encrypted can be captured in transit.

If your message to me doesn't require a high level of confidentiality (or doesn't have anything like usernames and passwords in it) this method of contacting me is perfect.

2) Send Text & Files Securely - Security Level: Stronger

WHEN TO USE THIS OPTION: You would use this form if you want to send me a long note with passwords or other sensitive or confidential information in it, or you want to upload and send digital files of some kind to me.

HOT IT WORKS: This form is MUCH more secure since nothing you send me is delivered over email—it is sent to my web server and stored until I securely login and access it (and then delete it)—and again, this entire website uses SSL so what you enter in to this form is secure.

You can sign in to the form using this password: 2sjb which, by the way, is only in place so I can keep out the automated spammers from finding, and spamming me, via the form.

3) Secure Email - Security Level: Strongest

WHEN TO USE THIS OPTION: If you must be 100% certain of end-to-end security for your communication OR file-sending to me, please contact me using one of these three end-to-end secure email methods:

End-to-end encryption means that no one but the intended recipient can read the message

End-to-end encryption means that no one but the intended recipient can read the message

a) THE BEST (AND EASIEST) METHOD: Unless you're a technical user, it's easiest and best just to send an email to my ProtonMail account: steve.borsch (at) protonmail.com. That said, do not send your email from an insecure email account!

Instead, get a free secure account of your own. An easy way to do that is by taking 5 minutes to sign up for a free ProtonMail account solely for the purpose of sending and receiving secure emails. Once your free account is set up, your ProtonMail-to-my-ProtonMail email will be fully encrypted from end-to-end (read more about ProtonMail's security model here) and this is the most secure method.

HOW IT WORKS: Anything you send from a ProtonMail account (including attachments) is encrypted before it leaves your web browser and is only decrypted when I login to ProtonMail to read it.

 

b) THE MORE TECHNICAL METHOD: If you are already a sophisticated user of encryption, below is my ProtonMail public key for you to use but please note: Only incoming messages in inline OpenPGP format are currently supported by ProtonMail (inline PGP enables attachments to also be encrypted).

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: OpenPGP.js v1.2.0
Comment: http://openpgpjs.org
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=jP5A
-----END PGP PUBLIC KEY BLOCK-----

qualsys-ssl-steveborsch-dot-com

SteveBorsch.com receives an "A" rating for SSL. It would be an "A+" rating but my hosting company, Media Temple, only supports SNI.

As a consequence, my rating gets dinged for not being 100% supportive of quite old technologies such as: one of the first versions of Android (2.3.7); Internet Explorer 6-8 on Windows XP (an operating system even Microsoft no longer truly supports); and Java 6u45; since none of those are supported by SNI.

Click the image for a larger view or generate a new report here.