4 ms·
PGPs trust levels are what made PGP never take off: even laypersons could see this is theater, not security. For reasons unclear to me Thunderbird chose not to
by brnt 6y ago
PGPs trust levels are what made PGP never take off: even laypersons could see this is theater, not security.
For reasons unclear to me Thunderbird chose not to go with something like autocrypt.org, but stick with standard PGP and implement parts of their attempt to simplify, which isn't nearly enough to get regular users on board, never mind implement things like forward security, which autocrypt does.
A missed chance from Mozilla, secure email would fit in well with their mission.
- upofadown 6y agoThere is an autocrypt plugin for Thunderbird: * https://addons.thunderbird.net/en-US/thunderbird/addon/autocrypt/ https://addons.thunderbird.net/en-US/thunderbird/addon/autoc... Now that most SMTP connections are encrypted with STARTTLS on the wire, autocrypt is not that valuable. At an email server autocrypt can be trivially man in the middled with just a simple script. It ends up being just another encrypted messaging solution that skips the hard but crucial problem of identity. Added: Autocrypt does not do forward secrecy. Most people want to keep their old emails, so forward secrecy wouldn't add much value: * https://articles.59.ca/doku.php?id=pgpfan:forward_secrecy https://articles.59.ca/doku.php?id=pgpfan:forward_secrecy
- brnt 6y agoI know, and I use it. It however wont support TB 78.