2 ms·
> I've admittedly never used PGP, but I would think if a website at any point has access to your private key and could transmit it back to their server, you're
by bdhess 9y ago
> I've admittedly never used PGP, but I would think if a website at any point has access to your private key and could transmit it back to their server, you're doing it wrong.
Encrypting a confidential message for another party is a public key operation. It’s the fact that the plaintext was sent to a remote server that’s problematic.
- wlesieutre 9y agoOh right, good catch. So the problem is that encrypted messaging on a webpage just can't be convenient like messaging on facebook if you want to keep the server from having your messages. Other people send you messages, and you'll need to decrypt them yourself outside of the browser if you want to keep the browser from having your private key.