In Plain English how to use and secure encryiption on all ougoing emails please

The first thing is to get the public keys from all your recipients. That is very difficult to do because few people have keys, few people care to make the effort to learn about encryption and get their own keys, and understanding encryption is difficult for many people.

If you want other people to encrypt messages to you, you will have to get your own public and private keys, give all your senders your public key, and ask them to encrypt their messages to you. That is also very difficult to do because, as I said, few people care to learn enough about encryption to do that and understanding encryption is difficult for many people.

Here is an excellent description of the issues involved in e-mail encryption. You may be able to decide better whether or not to use it after reading it. https://www.fastmail.com/blog/email-encryption/

Some people seem content when using an e-mail service provider that offers encryption such as Proton and Tuta. I don't know why they are content because the same challenges cited above stil exist unless all correspondents are also using an e-mail service provider that offers encryption.

Hi,

plain english:

Obviously you want to encrypt all outgoing emails, because your ISP spies on you and the world spies on you.

Posteo make this very easy on TB for Linux or Windows: (yet windows spies on you). You can build your own gpg key pairs (one public and one private) and upload your public key to your email provider (eg. Posteo).

TuttaNota just like Proton, very doubtfully honnest about defending your privacy ... (proton have sold real-time ecologist activists to the French gov. and TuttaNota are advocating for the removal of web cookies user consent on the basis that this would annoy, Us!).

When your question refers to how-to, then my advice is to use the cultofbeetroot github public and free repository on gpg and luks usb for linux users.

HOWEVER, when you are refering to using gpg encryption from a mobile Thunderbird, then my piece of advice (because as of my writting, external keys are buggy on this setting) is to create the key with your Mobile TB and export the private key to your other devices via USB.

Then on TB settings regardless of device you have options to encrypt all outgoing communications.

POSTEO: what Posteo offer is they can encrypt on a case by case with your destinee based on them having published their public key; AND this does not happen when you encrypt an email to someone with another key, you have not registered with Posteo before, read: real end-to-end.

Finally, Yes you absolutely always want to always encrypt outbound, yet you can only when you have the public keys of your correspondents.