5 ms·

Can somebody provide some practical use cases?

by nodesocket 13y ago

officialjunk 13y ago
encrypting messages and emails in browser?
jakejake 13y ago
Could be interesting for secure API calls..?
lifeisstillgood 13y ago
Simplified workflow - even across organisation boundaries An invoice is sent, and if the line manager and their line manager approve the invoice gets paid Build a portable version of Firefox onto a flash drive. Plug in drive, open up that Firefox In the local storage of ff-USB is my private key password protected Now bring up the web page, sign the json message irrevocably and post it back. One button click The risks of malicious cross site scripting is huge here. But that's the main use case afaik
cs02rm0 13y ago
Isn't this similar to Kim Dotcom's Mega filesharing service -encrypt data on the client so the service doesn't ever see what you're sending/storing?
bigiain 13y ago
Plausible deniability. I can get you to encrypt data with your public key before I upload it to my server. If the cops ever come to _me_ asking for your data, I can say "Sure! Here's the pgp encrypted blob. Sorry, I never get to see the unencrypted data." (Unfortunately, as per xkcd #538, they'll then just hit me with a $5 wrench until I send you a version of the OpenGPG javascript that bypasses the encryption step…)
belorn 13y ago
Let's see: Webmail for reading and decrypting emails. Creating "Real" private communication in social networks. Signing comments in news websites, and on-the-fly verification. Verify/provide identity across several non-connected social networks. On-the-fly verification of software packages in repositories like github. Potentially making Web-of-trust easier to use and expand. And that is for technologies already in existence as current web-browser plugins. Securing future API's as suggested in this comment thread sound also very interesting.
runn1ng 13y ago
A project I have been somehow involved in (altough not much for a lack of time) http://www.mailvelope.com/ http://www.mailvelope.com/ Encryption in GMail and maybe other webmails for chrome/chromium. It is surprisingly secure (see http://www.mailvelope.com/blog/security-audit-and-v0.6-release http://www.mailvelope.com/blog/security-audit-and-v0.6-relea... ) and super easy to use. It doesn't support signing and signature verification though.
mtgx 13y ago
Much easier to use e-mail encryption - if the e-mail providers decide to use it that is.

Can somebody provide some practical use cases?

officialjunk 13y ago

encrypting messages and emails in browser?

jakejake 13y ago

Could be interesting for secure API calls..?

lifeisstillgood 13y ago

Simplified workflow - even across organisation boundaries An invoice is sent, and if the line manager and their line manager approve the invoice gets paid Build a portable version of Firefox onto a flash drive. Plug in drive, open up that Firefox In the local storage of ff-USB is my private key password protected Now bring up the web page, sign the json message irrevocably and post it back. One button click The risks of malicious cross site scripting is huge here. But that's the main use case afaik

cs02rm0 13y ago

Isn't this similar to Kim Dotcom's Mega filesharing service -encrypt data on the client so the service doesn't ever see what you're sending/storing?

bigiain 13y ago

Plausible deniability. I can get you to encrypt data with your public key before I upload it to my server. If the cops ever come to _me_ asking for your data, I can say "Sure! Here's the pgp encrypted blob. Sorry, I never get to see the unencrypted data." (Unfortunately, as per xkcd #538, they'll then just hit me with a $5 wrench until I send you a version of the OpenGPG javascript that bypasses the encryption step…)

belorn 13y ago

Let's see: Webmail for reading and decrypting emails. Creating "Real" private communication in social networks. Signing comments in news websites, and on-the-fly verification. Verify/provide identity across several non-connected social networks. On-the-fly verification of software packages in repositories like github. Potentially making Web-of-trust easier to use and expand. And that is for technologies already in existence as current web-browser plugins. Securing future API's as suggested in this comment thread sound also very interesting.

runn1ng 13y ago

A project I have been somehow involved in (altough not much for a lack of time) http://www.mailvelope.com/ http://www.mailvelope.com/ Encryption in GMail and maybe other webmails for chrome/chromium. It is surprisingly secure (see http://www.mailvelope.com/blog/security-audit-and-v0.6-release http://www.mailvelope.com/blog/security-audit-and-v0.6-relea... ) and super easy to use. It doesn't support signing and signature verification though.

mtgx 13y ago

Much easier to use e-mail encryption - if the e-mail providers decide to use it that is.