1

Email messages are sent in plain text which means that the messages I send to Derpina are visible to anyone who somehow gets access to them while they are in transit.

To overcome this, various encryption mechanisms were developed: PEM and PGP are two of them.

PEM canonically converts, adds digital signature, encrypts, and sends; PGP does exactly the same.

So how do they differ? Is it that PGP (being a program) is used to generate a PEM message?

1 Answer 1

5

PEM was a proposed IETF standard for secure email. It depended on a single root certificate for its public key infrastructure (PKI), which was impractical and had its own problematic implications for security.

PGP started as a "proof of concept" for a less centralized "web of trust" PKI, and proved to be much more practical, finding widespread adoption and eventually founding the OpenPGP standard, while PEM faded into obscurity.

So basically PEM and PGP were competing protocols for encrypting emails, and PGP "won" while PEM "lost".

5
  • 1
    That pretty much sums it up! I just wanted to know if they were same or different or collaborated with each other
    – Dummy Derp
    Sep 6, 2012 at 18:58
  • Did they both use symmetric encryption?
    – Dummy Derp
    Sep 8, 2012 at 7:42
  • @Dummy Derp: both use symmetric encryption to encrypt messages and asymmetric encryption to sign messages and exchange encryption keys. Sep 8, 2012 at 16:30
  • is there any other competing format? Oct 5, 2020 at 23:04
  • 1
    @AndresLeonRangel S/MIME has seen pretty wide adoption, comparable to PGP. Oct 6, 2020 at 6:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.