8 ms·
Of course it's futile. The only thing that protects confidentiality is end-to-end zero-knowledge encryption performed in open source code audited by professiona
by superuser2 11y ago
Of course it's futile. The only thing that protects confidentiality is end-to-end zero-knowledge encryption performed in open source code audited by professional cryptographers, with a trusted system for distributing public keys. Using indie or European providers is just window dressing. Your emails will be in plaintext SMTP when they reach NSA fiber taps just like everyone else's.
Running your own server just shifts your trust from Google to DigitalOcean/Linode/AWS or your residential ISP (even less deserving).
I wish we would stop this navel-gazing about which providers to trust and FUCKING ADOPT GPG ALREADY. It's been, what, 15 years?
- dpc_pw 11y agoGPG sucks. I use it, I have a smartcard, I did subkeys, etc. I encrypt backups, I log with it to ssh. And it sucks. It sucks so bad, that I don't even know why I am doing it. There are just so many technical glitches, not to mention all the googling, FAQs, manuals that I had to bookmark and constantly refer to, to use it.