4 ms·
They've actually cracked PGP, and email is fine, especially between self hosters and anyone using chatmail. I've been using it for years: Delta really, really w
by hkt 2y ago
They've actually cracked PGP, and email is fine, especially between self hosters and anyone using chatmail. I've been using it for years: Delta really, really works.
- bo1024 2y agoCan you clarify "cracked"?
- pclmulqdq 2y agoPGP has been cracked when you use it with automation in that you can steal keys slowly by relying on the meta-behavior of systems around PGP. A classic attack here is timing how long it takes for a PGP-based automated system to reject your messages. PGP is intended for the classic "used by a human to encrypt emails manually" flow and is actually insecure if you automate around it.
- dingnuts 2y agothe timing attack you're describing is extremely common -- not unique to PGP -- and simple to mitigate. do you have more literature about the attack, or attacks, that you're describing?
- chuckadams 2y agoI'm fairly sure they meant "cracked" as slang for "solved", as in "I've cracked the case."