[LINK] email oligopolies

[David]

I'm not sure we have quite the same thing in mind...  I'm arguing for a Government-run (therefore trusted) server which keeps a database of each citizen's public-key; their private keys are stored locally, usually on their own PCs.  This database must be accessible using ISO standardised PKI protocols which are independent of O/S, organisation (such as the ATO), application (such as tax), and transit servers.  Probably ISO/IEC 27099:2022(E) is a good place to start.

If I send an encrypted and signed email to someone, my email client encrypts it using the recipient's public key (retrieved seamlessly from the PKI server) and their client decrypts it using their local private key.  Conversely, it's signed using my private key, and the recipient's email client can verify the signature using my public key.

My apologies if I've misread Marghanita's email and everyone is perfectly familiar with this stuff, probably more than I am in fact!  But general use of such technology should greatly reduce opportunities for scammers, and it's one thing the gummit could do.  Maybe President Trump wouldn't like it though... 

_David_

On Saturday, 10 January 2026 08:20:35 AEDT Marghanita da Cruz wrote:

>> I think the only real solution is Federal Government action to (a) set up a trusted, national public-key registry so end-to-end email encryption becomes standard, and (b) educate citizens about keeping a local copy / backup / database.
> 
> based on/requiring MS operating system - I think that is why the "ato upgrade for GST BAS online reporting" failed on my linux laptop, way back in 2000.  Things may be better now, but I wasted a lot of time tying to trouble shoot!  How many of ato free and fast services need MS on client's desktop. By the way, there is a company key:
> Use our self-service any time – it’s easy, free and fast:
> https://www.ato.gov.au/about-ato/contact-us/self-help-services