3 ms·
"I will start GPG encrypting email to anybody I know who will be able to deal with it" As sad as it is to say, lets be honest and admit that this is a fairly s
by dfc 13y ago
"I will start GPG encrypting email to anybody I know who will be able to deal with it"
As sad as it is to say, lets be honest and admit that this is a fairly small number. How long do you think it will be till your less committed friends get tired of decrypting your emails and just ignore what you send? Make sure you only pick people that use actual email clients because gpg and Gmail is no fun.
As far as the "Thomas Crowne Affair attack" goes generating effective cover traffic is not easy and random traffic is definitely a bad idea. Basic traffic analysis would be able to separate your legit emails from your cover traffic.
Addendum: I noticed you just generated your new gpg key yesterday. Why not go big and use a 4096 bit key?
- bigiain 13y agoNow I'm thinking of a patched SMTP server, that queues all outgoing mail - and sends mail every hour on the hour to each of my GPG enabled recipients, with a queued "real mail" if there is one or a random encrypted NSA RickRoll if there's no real mail to send. (I suspect that'd last about 121 minutes before most of my friends spam filtered me forever)
- dfc 13y agoDon't forget you have to use your main machine to send the random messages to your smtp server. If you do not it will be pretty easy to recognize what mail was routed through the machine and which messages were randomly generated by the server as a cover traffic.
- icebraining 13y agoIt seems someone has written a PGP extension for Chrome/GMail: https://chrome.google.com/webstore/detail/mymail-crypt-for-gmail/jcaobjhdnlpmopmjhijplpjhlplfkhba/details https://chrome.google.com/webstore/detail/mymail-crypt-for-g...
- deleted 13y ago[deleted]
- joeyo 13y agoI've just started using mailvelope, which works with several webmail providers and also has a firefox extension: https://chrome.google.com/webstore/detail/mailvelope/kajibbejlbohfaggdiogboambcijhkke https://chrome.google.com/webstore/detail/mailvelope/kajibbe...
- swombat 13y agoIt looks like Mailvelope only supports RSA encryption (up to 4096bit), not any of the other types of algorithms for PGP. It lists RSA/RSA and RSA/ElGamal but doesn't allow me to select them. Can someone who knows their shit about encryption chime in as to whether that's sufficient?
- rdl 13y agoEvery protocol should allow "no-ops" of arbitrary size, and then make it easy to do traffic analysis defeat by doing communications scheduling like that.