4 ms·

> PGP support in an email client is worse than nothing. https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-p

by dngray 7y ago

> PGP support in an email client is worse than nothing. https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html Often who you're talking to is not sensitive. What you were talking about on the other hand might be. https://arstechnica.com/information-technology/2016/12/signal-does-not-replace-pgp/ https://arstechnica.com/information-technology/2016/12/signa... With things like MTA-STS and DANE we're only gonna get metadata leaks really to the mail servers themselves. > Don't use email for secure communications, period. Use a secure messaging app like Signal, instead. This assumes you're okay in giving everyone your phone number. What if you do that and then one of your contacts starts calling you all the time? So then it's suggested to have two SIM cards. Here in my country that either means post paid paying a monthly bill or pre paid, and having to recharge it or lose it. It's not like we haven't seem SIM jacking related attacks either. Phone numbers are a really terrible identifier. I am also curious to know what will happen if the US/UK ever passes laws like Australia did. Signal LLC is American, and therefore would have to comply with the laws there if they ever passed something like Australia did. Realistically if we're going to throw PGP out, we shouldn't be suggesting centralized systems as an alternative. Has anyone forgotten about William Barr? He's been trying all year to get backdoor in Whatsapp E2EE, the same E2EE used by Signal.

Tomte 7y ago
> What if you do that and then one of your contacts starts calling you all the time? The same as if they start emailing you all the time: you block them. And since phone numbers are harder and costlier to just generate and use, that block is more meaningful blocking an email address.
- dngray 7y ago
  > The same as if they start emailing you all the time: you block them. > And since phone numbers are harder and costlier to just generate and use, that block is more meaningful blocking an email address. You might think that but throwaway phone numbers can be bought cheap for the purpose of spamming. I cannot think last when I got spam emails in my inbox. I can however think of when I got spam SMSes. It's also obviously cheap enough they can use robots to say things too. Could this be because someone who knew my number had a compromised phone? quite possibly. I am not very happy about Facebook having my phone number even though I don't have an account with them.
  - Tomte 7y ago
    Your contacts (friends, acquaintances, business partners) include professional spammers?

by dngray 7y ago

Tomte 7y ago

> What if you do that and then one of your contacts starts calling you all the time? The same as if they start emailing you all the time: you block them. And since phone numbers are harder and costlier to just generate and use, that block is more meaningful blocking an email address.

dngray 7y ago
> The same as if they start emailing you all the time: you block them. > And since phone numbers are harder and costlier to just generate and use, that block is more meaningful blocking an email address. You might think that but throwaway phone numbers can be bought cheap for the purpose of spamming. I cannot think last when I got spam emails in my inbox. I can however think of when I got spam SMSes. It's also obviously cheap enough they can use robots to say things too. Could this be because someone who knew my number had a compromised phone? quite possibly. I am not very happy about Facebook having my phone number even though I don't have an account with them.
- Tomte 7y ago
  Your contacts (friends, acquaintances, business partners) include professional spammers?