4 ms·
Both PGP and Signal will leak if you use them incorrectly, so that comparison doesn't really hold up. I say this as someone who uses both.
by MrDresden 10mo ago
Both PGP and Signal will leak if you use them incorrectly, so that comparison doesn't really hold up.
I say this as someone who uses both.
- akerl_ 10mo agoOne key difference is that Signal intentionally makes design choices to make it harder to use incorrectly, and PGP is comically easy to use incorrectly.
- mmooss 10mo agoPGP email doesn't match Signal security: * PGP doesn't encrypt email metadata, so the attacker gets a record of every senders, receiver, time, date, and subject line, for free, with PGP actually working at its best. * Email usually isn't usable without storing it server-side (for multi-client access), and without being able to search it. That requires your email to be in clear text on the server. That's solved with an on-prem mail server, but not many people have that - very few end users can operate one. * Email endpoints generally aren't secure, so even if you somehow secure your personal mail store, possibly nothing is secure except your draft messages. Every email is sent to or received from other people, so your messages are subject to their security practices.