3 ms·
Looks like this is a PGP addon for existing email web interfaces. In case anyone is considering using this, they should first think about the strong recommendat
by doomrobo 6y ago
Looks like this is a PGP addon for existing email web interfaces. In case anyone is considering using this, they should first think about the strong recommendation to not use encrypted email https://latacora.micro.blog/2020/02/19/stop-using-encrypted.html https://latacora.micro.blog/2020/02/19/stop-using-encrypted....
- phn 6y agoI don't understand this argument. I understand that PGP might not be the way to go. I understand that metadata might leak. I understand that every cypher will be broken, eventually. But what's wrong with trying to send a an e-mail with contents you want no other party than the recipient to read, again, provided the recipient doesn't share it with other people. For the record, I don't send encrypted mail. UX for these is generally terrible, hard to verify sigs, etc. I am genuinely asking what part am I missing. Is there a fundamental reason that encrypted e-mail cannot work with current e-mail protocols? (but replacing PGP if needed)
- gavindean90 6y agoI think that there is nothing wrong with trying to do it. The argument is that we shouldn't have expectations that things sent through email can be truly secure and that doing any encryption with email should be thought of as a hobby. If you need real security, use something else.
- _ink_ 6y agoAll valid concerns, but where is the tool that fixes all of them, while keeping the decentral organization that email allows? I recently noticed that some of our federal offices allow to use pgp when communicafing with them. I still think it is an improvement over exchanging unencrypted email with them.
- doomrobo 6y agoGood question. There isn't really a great answer right now. Matrix supports e2ee. Though I believe the only existing implementation is Riot-IM (which actually planned on stabilizing e2ee and making it default today, Apr. 16 https://github.com/vector-im/riot-web/issues/6779 https://github.com/vector-im/riot-web/issues/6779). Also the MLS protocol (https://messaginglayersecurity.rocks/ https://messaginglayersecurity.rocks/) will likely support federation once it's published, although it'll be a long while before people start implementing and federating it.
- upofadown 6y agoJust to clarify, the recommendation is to not use email at all. We are to just give up on the concept entirely...