Why PPAP Is Bad for Email Security, and What to Do Instead (archived 2026-07-27)
We examine why PPAP — emailing a password-protected ZIP and then sending the password in a separate email — is dangerous, and lay out the realistic alternatives of TLS, S/MIME, and authenticated downloads from a practical standpoint. Archived version of https://comcomponent.com/en/blog/2026/04/03/000-why-ppap-is-bad-and-what-to-do/, as published on 2026-07-27. The live article is maintained and may change after this date. First published 2026-04-03.
Authors
- Go Komura (ORCID: https://orcid.org/0009-0008-8895-8390)
Institutions
- Fujikura (United States) (US)
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2026-07-27
- DOI
- https://doi.org/10.5281/zenodo.21614597
- Primary Topic
- User Authentication and Security Systems
- Type
- article
- Field-Weighted Citation Impact
- 0.00