2 ms·
Enigmail is far from friction free and no 1-click setup. I still have to go through key generation last I checked. And then publish those keys or give them to f
by zaarn 9y ago
Enigmail is far from friction free and no 1-click setup. I still have to go through key generation last I checked. And then publish those keys or give them to friends.
If PGP/GPG wants adoption they need to eliminate those friction points, a TOFU model with automatic key redistribution should lower friction sufficiently but except TOFU there isn't much development in that direction.
>This is exactly what it is doing. PGP/MIME is a thing.
I don't think I ever received a single PGP/MIME email. I don't think a lot of people use PGP/MIME. It's a niche setting for a niche software.
- dane-pgp 9y agoYour desire for "a TOFU model with automatic key redistribution" is well-founded, and people (including implementers) are trying to do something about this. Check out the Autocrypt project: https://autocrypt.org/ https://autocrypt.org/ A similar (and complementary) approach is outlined in RFC-7929: https://tools.ietf.org/html/rfc7929 https://tools.ietf.org/html/rfc7929 which is supported by GPG and a few email providers.
- AnaniasAnanas 9y ago> no 1-click setup True, it is 3-click setup. > I don't think I ever received a single PGP/MIME email I haven't seen non-PGP/MIME emails in ages. In fact, Engimail uses PGP/MIME by default.