4 ms·

GPG is used by some for email sure, but it isn't the only option. S/MIME has native support in pretty much all native mail clients, and is more pragmatic about

GPG is used by some for email sure, but it isn't the only option. S/MIME has native support in pretty much all native mail clients, and is more pragmatic about how you trust an identity.

LeoPanthera 9y ago
I bet that all the non-email uses of gpg are actually greater than the email uses. Its used as a component of many Linux distribution package managers, for example.
- stephenr 9y ago
  Agreed, and I don't mean to diminish the importance of gpg. But claiming all the worlds "encrypted email" depends on it is a bit of a stretch is all.
- mikegerwitz 9y ago
  Note that libgcrypt is also part of GnuPG, which finds its use in many projects as well.
- sigzero 9y ago
  Then maybe the distros should find a way to fund things they rely on?
  - madez 9y ago
    Some companies rely on distros. Do these companies make sure to fund the distributions?
- nickpsecurity 9y ago
  I always tell people to just put the content in files that they then encrypt with GPG. Then, send them over some transport (eg email, IM, postal service). Makes usage really simple where you only need to know a few commands. Those can be turned into a shell script or GUI client if someone wanted to put work into it.
zanchey 9y ago
Is there much deployment of S/MIME in the corporate world? Identity generation is much easier in GPG in my experience. We have a national PKI for doctors that could have been, but isn't, used for S/MIME. Missed opportunity.
- stephenr 9y ago
  In some ways it's easier for corporate, as the ca's have more incentive to make it useable. I asked a ca about s/mime pricing - on its own they have a 50x3yr minimum purchase. They offered to waive the minimums if I combined with a regular server cert purchase.
  - firebird84 9y ago
    A while back you could get a globally trusted free cert from Comodo. I'm not certain they're still doing it but you could see if the free route will work. (The keying material is generated inside the browser and never leaves your machine)
    - stephenr 9y ago
      You still can but they're a bit of a pain to use, and honestly anything that's not Comodo would be nice. After their shitbird response to LetsEncrypt, I'd rather pay someone else than use their "free" option. Edit: for those who didn't follow it at the time, this sums it up: https://arstechnica.com/tech-policy/2016/06/800-pound-comodo-tries-to-trademark-upstart-rivals-lets-encrypt-name/ https://arstechnica.com/tech-policy/2016/06/800-pound-comodo...
      - DonHopkins 9y ago
        Wow, I missed that story the first time around. Just catching up on the details. That Comodo CEO Melih Abdulhayoğlu is such a dishonest, incompetent buffoon! I had no idea how terrible a company Comodo is, but now I do thanks to the CEO's own words and actions. https://www.youtube.com/watch?v=Z7Wl2FW2TcA&feature=youtu.be&t=5m https://www.youtube.com/watch?v=Z7Wl2FW2TcA&feature=youtu.be...
pferde 9y ago
Guess what? GnuPG also supports S/MIME.
- stephenr 9y ago
  But it isn't required for S/mime. I'm not aware of any other pgp implementations besides the original.

GPG is used by some for email sure, but it isn't the only option. S/MIME has native support in pretty much all native mail clients, and is more pragmatic about how you trust an identity.

LeoPanthera 9y ago

I bet that all the non-email uses of gpg are actually greater than the email uses. Its used as a component of many Linux distribution package managers, for example.

stephenr 9y ago
Agreed, and I don't mean to diminish the importance of gpg. But claiming all the worlds "encrypted email" depends on it is a bit of a stretch is all.
mikegerwitz 9y ago
Note that libgcrypt is also part of GnuPG, which finds its use in many projects as well.
sigzero 9y ago
Then maybe the distros should find a way to fund things they rely on?
- madez 9y ago
  Some companies rely on distros. Do these companies make sure to fund the distributions?
nickpsecurity 9y ago
I always tell people to just put the content in files that they then encrypt with GPG. Then, send them over some transport (eg email, IM, postal service). Makes usage really simple where you only need to know a few commands. Those can be turned into a shell script or GUI client if someone wanted to put work into it.

zanchey 9y ago

Is there much deployment of S/MIME in the corporate world? Identity generation is much easier in GPG in my experience. We have a national PKI for doctors that could have been, but isn't, used for S/MIME. Missed opportunity.

stephenr 9y ago
In some ways it's easier for corporate, as the ca's have more incentive to make it useable. I asked a ca about s/mime pricing - on its own they have a 50x3yr minimum purchase. They offered to waive the minimums if I combined with a regular server cert purchase.
- firebird84 9y ago
  A while back you could get a globally trusted free cert from Comodo. I'm not certain they're still doing it but you could see if the free route will work. (The keying material is generated inside the browser and never leaves your machine)
  - stephenr 9y ago
    You still can but they're a bit of a pain to use, and honestly anything that's not Comodo would be nice. After their shitbird response to LetsEncrypt, I'd rather pay someone else than use their "free" option. Edit: for those who didn't follow it at the time, this sums it up: https://arstechnica.com/tech-policy/2016/06/800-pound-comodo-tries-to-trademark-upstart-rivals-lets-encrypt-name/ https://arstechnica.com/tech-policy/2016/06/800-pound-comodo...
    - DonHopkins 9y ago
      Wow, I missed that story the first time around. Just catching up on the details. That Comodo CEO Melih Abdulhayoğlu is such a dishonest, incompetent buffoon! I had no idea how terrible a company Comodo is, but now I do thanks to the CEO's own words and actions. https://www.youtube.com/watch?v=Z7Wl2FW2TcA&feature=youtu.be&t=5m https://www.youtube.com/watch?v=Z7Wl2FW2TcA&feature=youtu.be...

pferde 9y ago

Guess what? GnuPG also supports S/MIME.

stephenr 9y ago
But it isn't required for S/mime. I'm not aware of any other pgp implementations besides the original.