Any thoughts on this? At work someone wants to interact with a financial institution. They want to exchange documents over the Internet with each other. She wants to email documents to them and receive things from them and asked me about security. Personally, I think it's ill-advised to send anything over the Internet that you want to be "secure". I also told her about PGP and GPG and about how that's how it would be done but about how those methods might be complex for them. I recommended using USPS actually but she said that's too slow. Now I'm thinking about them using Box.com but my gut is telling me that's just a security problem waiting to happen.

So not really sure what to do. I told her that for now, if she absolutely has to do this, then use this program AxCrypt and encrypt the file before sending and have them use AxCrypt to decrypt the file at their end. What do you guys think? No good?