4 ms·
Nice project. A year ago I would have said that there was no market for this; it'll be interesting to see if that has changed in the post-Snowden world. I have
by macavity23 13y ago
Nice project. A year ago I would have said that there was no market for this; it'll be interesting to see if that has changed in the post-Snowden world.
I have one reservation. From https://kinko.me/faq/ https://kinko.me/faq/ :
The box receives the email and checks that it knows all GnuPG encryption keys needed to forward an encrypted version of the mail. If it does not it rejects the email. Otherwise it encrypts your email and sends it to the receivers’ email accounts.
This makes it sound like a user can only send email to recipients whose GPG keys they have. If this is the case, this is a huge red flag; the past two decades of encrypted email usage has proved conclusively that the huge majority of users do not care about privacy. If as a kinko user I have to get GPG keys for all my friends, this will never take off.
I'd strongly recommend encrypting where possible, but allowing unencrypted copies to be sent where no gpg key is found. Perhaps there could be a warning and resend, eg 'Some of the recipients for this mail have no gpg keys. Please reply to this message to confirm you understand that this message will be sent unencrypted to those recipients'?
Also, if you can solve the user experience problem with generating and using GPG keys, you will be doing the world a great service.
Good luck! Will be following the project with interest.
- radiospiel 13y agoYou are right, the FAQ is probably not right at this point, In fact, the box uses keys it knows about, and tries to get keys when receiving encrypted mail. But of course you can send unencrypted email. (Otherwise you would have to use a specific email not only for contacts that don't use GnuPG, but also for registration with 99% of all the websites out there.)
- radiospiel 13y agoAs for the business case: yes, it probably is really hard to do something open source on everyday hardware. I don't see big business here - but something to make the world a more private place.
- emmelaich 13y agoLooks good. FWIW, GNU Anubis (an MTA) can do gpg signing. Of course, there's a big gap between 'can do' and actually does, which is where this (Kinko) comes in. http://www.gnu.org/software/anubis/manual/anubis.html#SEC64 http://www.gnu.org/software/anubis/manual/anubis.html#SEC64