3 ms·
This is at the same time as they've announced they're getting rid of encrypting their outgoing messages with PGP! (If you add your public key of course!) I was
by purpleidea 3y ago
This is at the same time as they've announced they're getting rid of encrypting their outgoing messages with PGP! (If you add your public key of course!)
I was always very impressed by this-- every service that sends emails should support this. Even banks don't!
- yellow_lead 3y agoThis is because hackers were using this to lock people out of their own accounts. They would add a PGP key and then the user could no longer read any emails from FB to recover their account. There are maybe alternative solutions, but it's not a bad reason to remove it IMO.
- kevincox 3y agoThis seems like a pretty dumb reason. If they can set the PGP key they can also change the email. If the account recovery team allows access to recently removed emails as part of the recovery process then it should also allow contacting those addresses without a recently added PGP key. Logically adding a PGP key is equivalent to changing the email, the previous person can't access the messages anymore. If the recovery process handles these cases differently it is a flaw in the process.