3 ms·
What about opmsg as a GPG replacement? > opmsg is a replacement for gpg which can encrypt/sign/verify your mails or create/verify detached signatures of local
by aorth 8y ago
What about opmsg as a GPG replacement?
> opmsg is a replacement for gpg which can encrypt/sign/verify your mails or create/verify detached signatures of local files. Even though the opmsg output looks similar, the concept is entirely different.
https://github.com/stealth/opmsg https://github.com/stealth/opmsg
- lmm 8y agoYour messages have perfect forward secrecy except when they don't, because it uses DH but falls back to RSA when it runs out of keys. That's a security failure waiting to happen; IMO no forward secrecy is a more user-friendly model than "perfect forward secrecy except sometimes not". Support for multiple recipients is inherently a mess in that kind of model. No effort is made to even try to solve the identity problem PFS aside it doesn't seem to do anything you couldn't do with GPG - e.g. there's nothing to stop you verifying GPG key fingerprints by hand or using different keys to communicate with different recipients. In particular it doesn't seem to offer any improvement on the big problem that this is about - good MUA integration. Ultimately that looks like a good project that takes those techniques as far as they can go, but also shows exactly why those techniques never made sense for an email-like environment.