6 ms·
You'd still have to vet your GPG install & mail client code. Also, it's not difficult to fork the code to create a client that doesn't use the browser at all. I
by jaekwon 13y ago
You'd still have to vet your GPG install & mail client code. Also, it's not difficult to fork the code to create a client that doesn't use the browser at all. It just hasn't happened yet.
How do you know which public key belongs to the address? Key servers? Web-of-trust? Look it up on their homepage?
Scramble has an address -> pubkey resolution system which balances security with usability.
At least with Scramble you can create a secure USB stick to boot from with all of that preconfigured. Any solution that uses bare GPG still has severe usability problems.
http://www.gaudior.net/alma/johnny.pdf http://www.gaudior.net/alma/johnny.pdf
- blahbl4hblahtoo 13y agoVerifying the code on your system is something that can be easily done and easily verified the next time you use it. Its your system after all. I salute what you are trying to do, but you have to understand that the Js browser method, as it stands today, is a dead end.
- tptacek 13y ago"Balances security with usability" is here literally a euphemism for "trades security for usability".