3 ms·

We had this at Lavaboom (German encrypted email, bankrupt) 2 years ago. Our designer came up with this idea, I initially wanted to implement the classic 2 passw

by smnscu 10y ago

We had this at Lavaboom (German encrypted email, bankrupt) 2 years ago. Our designer came up with this idea, I initially wanted to implement the classic 2 password design. The tricky bits are (1) explaining to the users that they can't reset their password and (2) supporting users who opt for manual key management (e.g. I own name@mydomain.com and I want to move from Google Apps + GPGtools to Lavaboom/Protonmail/etc). https://github.com/lavab https://github.com/lavab our (brilliant) designer http://www.felixvonlooz.com/ http://www.felixvonlooz.com/

tux3 10y ago
>The tricky bits are (1) explaining to the users that they can't reset their password So that's interesting, because as I understand it ProntonMail does allow users to reset their password using a recovery email, although the feature can be disabled in the settings.
- vabmit 10y ago
  If a user resets their single password or encryption password, they lose access to their previous e-mail. This is because what essentially happens is that a new PGP keypair is generated and the Secret Key is encrypted with the new password. Since we do not have their old, lost, password we cannot access their secret key to decrypt the e-mails (and subsequently re-encrypt them with the new Public Key).
- smnscu 10y ago
  An alternative is to generate a bunch of recovery keys, encrypt the PGP key pair with each of them, and store the result (but not the recovery keys). If you go for the 1 password solution this should be a no brainer, but still way too complicated for the utterly non-technical user (so most of them).
deleted 10y ago
[deleted]
sleepingeights 10y ago
With as many SHA1/SHA256 etc ASICs, hopefully they change some of the hashing parameters to make this secure. The downside is the server has to match the hashing iterations. Considering how emails can stay in service storage for decades , (even longer if archived by spies, etc), their security is now reaching the requirements of data on Hard Drives.

by smnscu 10y ago

tux3 10y ago

>The tricky bits are (1) explaining to the users that they can't reset their password So that's interesting, because as I understand it ProntonMail does allow users to reset their password using a recovery email, although the feature can be disabled in the settings.

vabmit 10y ago
If a user resets their single password or encryption password, they lose access to their previous e-mail. This is because what essentially happens is that a new PGP keypair is generated and the Secret Key is encrypted with the new password. Since we do not have their old, lost, password we cannot access their secret key to decrypt the e-mails (and subsequently re-encrypt them with the new Public Key).
smnscu 10y ago
An alternative is to generate a bunch of recovery keys, encrypt the PGP key pair with each of them, and store the result (but not the recovery keys). If you go for the 1 password solution this should be a no brainer, but still way too complicated for the utterly non-technical user (so most of them).

deleted 10y ago

[deleted]

sleepingeights 10y ago

With as many SHA1/SHA256 etc ASICs, hopefully they change some of the hashing parameters to make this secure. The downside is the server has to match the hashing iterations. Considering how emails can stay in service storage for decades , (even longer if archived by spies, etc), their security is now reaching the requirements of data on Hard Drives.