Contact Me Securely Use one of these three ways to contact me securely since you never, ever, want to email anyone your private, confidential or important information (unless you use #3 below) since email is NOT a reliably secure method to send stuff you need protected. 1) Secure Contact Form - Security Level: Minimal WHEN TO USE THIS OPTION: Use my secure contact form when you just want to send me a quick note and minimal security is acceptable. HOW IT WORKS: When you send me a message using my contact form your entry is secure (this entire website uses SSL) but the content of your message travels across the internet in the clear. Why? It's because sending anything via email that is not end-to-end encrypted can be captured in transit. If your message to me doesn't require a high level of confidentiality (or doesn't have anything like usernames and passwords in it) this method of contacting me is perfect. Secure Contact Form 2) Send Text & Files Securely - Security Level: Stronger WHEN TO USE THIS OPTION: You would use this form if you want to send me a long note with passwords or other sensitive or confidential information in it, or you want to upload and send digital files of some kind to me. HOT IT WORKS: This form is MUCH more secure since nothing you send me is delivered over email—it is sent to my web server and stored until I securely login and access it (and then delete it)—and again, this entire website uses SSL so what you enter in to this form is secure. You can sign in to the form using this password: 2sjb which, by the way, is only in place so I can keep out the automated spammers from finding, and spamming me, via the form. Send Text & Files Securely 3) Secure Email - Security Level: Strongest WHEN TO USE THIS OPTION: If you must be 100% certain of end-to-end security for your communication OR file-sending to me, please contact me using one of these three end-to-end secure email methods: End-to-end encryption means that no one but the intended recipient can read the message a) THE BEST (AND EASIEST) METHOD: Unless you're a technical user, it's easiest and best just to send an email to my ProtonMail account: steve.borsch (at) protonmail.com. That said, do not send your email from an insecure email account! Instead, get a free secure account of your own. An easy way to do that is by taking 5 minutes to sign up for a free ProtonMail account solely for the purpose of sending and receiving secure emails. Once your free account is set up, your ProtonMail-to-my-ProtonMail email will be fully encrypted from end-to-end (read more about ProtonMail's security model here) and this is the most secure method. HOW IT WORKS: Anything you send from a ProtonMail account (including attachments) is encrypted before it leaves your web browser and is only decrypted when I login to ProtonMail to read it. b) THE MORE TECHNICAL METHOD: If you are already a sophisticated user of encryption, below is my ProtonMail public key for you to use but please note: Only incoming messages in inline OpenPGP format are currently supported by ProtonMail (inline PGP enables attachments to also be encrypted). -----BEGIN PGP PUBLIC KEY BLOCK----- Version: OpenPGP.js v1.2.0 Comment: http://openpgpjs.org xsBNBFgsiHoBCAD4Ejohk0yQLqnVIN8sOWmCPk5FboV09x7GLhx0WojySz10 oILFmigu5/oZBPi8B3unL8lZW+T8bh4+4BtWomkNJ9/7eDyr9McqiOwe1lhY SA6UNEv1tOMUM2OIxedL//fltKKOtKO8lFtf3qmPzPWkMXVgPS4LDrTpqJ6D 0RTtbPngXnHtM1D63+KQ1xBtIDBo2d3xgOTu6k6rDqsLOqlR7htBBOFBX6t0 qZFor0pfR0FgI5eYinruDS+sKfmvtK+PUP4PRae3Qu94VPxcY2JzzkRSotJM LuqzAlJqh2/e2+vYYLgoVAFp8aHFlDnt/1JCCzHYteEFPRAKulmJkbHdABEB AAHNHTxzdGV2ZS5ib3JzY2hAcHJvdG9ubWFpbC5jb20+wsByBBABCAAmBQJY LIh6BgsJCAcDAgkQlv+8zJ3gd90EFQgCCgMWAgECGwMCHgEAAAHrCAChGEdf KvomY6kLH27T3CLiX5Q6wBJ3DNOOQfm9voB11v8CbZCtzJmUqGmL6K9HsVgp uVyVhgY3Noypz7ExXzOXy0y9Ku4Z/vEtrNcvZsyC8uz3tJwC++WDGxau/0Ud 5q2YuPqyG5LUISemUtpiZaIwlWEOch+6UUHVEW+fOTPrBEvecAmkx/zuiHfy xs4YuOWvcWFwlY81Rf6qFtOq9DBQV4oA5d4IWyLvRUeraSZ0h3PcJk/fQvIP n6wIg+j8E294XsbjJ8AyUhciO+gXXcIFaWNL6JBxakG9pMjZvchiVM68EBch u1PoEvcJpZIk+XRyVEQS97K+6gZ7eg6hmerhzsBNBFgsiHoBCADjl9iqvw2Y L9ZtX8ZtcnWDaURdp/SOA9dJ88ig7XyCevByHovK92jHxbXC0RejxvFbJC3N gpTMdDGMSbuEa9Q7tFNgojaECiY4e5O3hTYKPWo7gjf2Jc+S/EKb5+GWebNN iwbddqIOxRuTO4+KTzv5i6J/M965LuyWzfcbw95mQEK1s0LR4NyFcng7Wlji 6WBflAPtioxsRQzhdTKCXD2qPa5urvGGkeGu3Ifq6t+bmfTLNpfzoylDSLId ZTqIcirlU35+ll0QiVoDTd1UiAncb0yQzlxcDzEdfiybJRPxg5OJsHVOqn/M CVq9SJl70mKWz75H+t9Elug27C3Ki/GlABEBAAHCwF8EGAEIABMFAlgsiHsJ EJb/vMyd4HfdAhsMAAD4ugf/dYo3hpaE/zjFVZvD/8zv3/Vt0I/rKy5c71Hq uTSc4j98ZkHCv1rR3McFG//LJTG2cFg/SuDaVZ+K5Lqp5GpDkmMCH+VBMKBJ BAt2gXmA3akJmIGO0ix25NZMFHh35zaMQ03bIBOXbOyIrtd97uA+JTBU0mz6 E0LhI4KOMbowWX7qKaTKPsV+X5UMJI2q5HvVzC8dZhOI1dxRoFP+auu/Ti4A DDqURT12nGVgJG3NGME8lfWbNEBq0Smcpq0+sgKAvupArABKx0wRuIu4j67F jTYCIQvkayaPAPVvEAtuKoiuQribo48KpIy9d9wCQTvd7HfL+metRhFFlo3I E0RXcg== =jP5A -----END PGP PUBLIC KEY BLOCK----- SteveBorsch.com receives an "A" rating for SSL. It would be an "A+" rating but my hosting company, Media Temple, only supports SNI. As a consequence, my rating gets dinged for not being 100% supportive of quite old technologies such as: one of the first versions of Android (2.3.7); Internet Explorer 6-8 on Windows XP (an operating system even Microsoft no longer truly supports); and Java 6u45; since none of those are supported by SNI. Click the image for a larger view or generate a new report here.