Boulth

23 ms·

211.
by Boulth 8y ago
> When you’re communicating with email addresses outside of ProtonMail, their servers will see your emails. Your emails might then be encrypted “at rest”, but they’ve passed through their servers unencrypted anyway. Decryption is done in
212.
by Boulth 8y ago
> not just to and from but also the subject line Subject is hidden in newer software e.g. Enigmail and K9 (it's moved to encrypted part and replaced with a placeholder see https://github.com/autocrypt/memoryhole
213.
by Boulth 8y ago
When Google announced Open Handset Alliance (Android) in 2007 it already had 30 members or so.
214.
by Boulth 8y ago
> One of the most important parts of the original design for go get was that it was decentralized That's one of the things I like in go most. Having decentralized packages via domains and URLs and then index them (godoc.org works ve
215.
by Boulth 8y ago
This is really nice! I wish there were hardware manufacturers interested in shipping PCs/laptops with Mu.
216.
by Boulth 8y ago
This is excellent, concise summary. Thank you zimablue!
217.
by Boulth 8y ago
Actually "for Linux" came from the legal department as Linux is a trademark and it's a common practice to indicate relationship with "for X" where X is a trademark (e.g. "Y for Twitter" instead for "T
218.
by Boulth 8y ago
I'm surprised OpenJDK is not mentioned. OpenJDK is the reference implementation, works very well and probably will be used in majority of use cases. (there are only handful of cases where one would need Oracle JDK)
219.
by Boulth 8y ago
I believe he is Finney. Finney was one of main developers of PGP so he had a strong crypto knowledge. Do you remember Satoshi Dorian Nakamoto? It turns out he lived near Finney. Maybe Finney knew him and thought it was a nice name.
220.
by Boulth 8y ago
It works since July see this blog post: https://protonmail.com/blog/address-verification-pgp-support... I don't know why they announced it now but I've been using it previously.
221.
by Boulth 8y ago
To be honest they always supported PGP encryption (they are the biggest contributor and lead Openpgpjs development). Since July it's possible to also send encrypted messages to external contacts. ProtonMail is actually very committed t
222.
by Boulth 8y ago
Channel ID has been depreciated and replaced by Token Binding but I'm sure U2F sites don't use either. The real protection is quite simple: incorporating the origin (domain name) in the protocol. So phishers would get a bad respon
223.
by Boulth 8y ago
Firefox Android is more important than the desktop version as that's the only way to have uBlock on mobile.
224.
by Boulth 8y ago
Excellent concepts!
225.
by Boulth 8y ago
> Especially given that this project is what HN is supposed to be about - done by a lone hacker with help from volunteers, trying to create a different and hopefully better social media. I've emailed the author of micro.blog once ov
226.
by Boulth 8y ago
Well tags are usually perceived as immutable but one can imagine adding an info to the tag with the "next version" coordinates. For example, tag v1.0: and a text at the bottom of the message "Next-Version: v1.1". Or if o
227.
by Boulth 8y ago
I was mainly proposing using paths and added URLs as an interesting tidbit but if you check the Dhall Readme I linked there is an example with content integrity (sha256 checksum). As for versioning: use different URL for different version!
228.
by Boulth 8y ago
The module/crate path issues raise a question, why doesn't it mimic what the file system does and have / for absolute paths, and ./ for relative paths? Of course it would probably be to hard to change it now in Rust but
229.
by Boulth 8y ago
> You can't actually "prevent the private key from being disclosed even if the user wants to export it" out of box on Windows [if you have an HSM this may be an option although it may also make the keys unsuitable for some
230.
by Boulth 8y ago
HTTP/2 is federated in a sense that the network is composed out of heterogeneous nodes operated by different parties and these nodes communicate with each other (applications running on servers frequently act as clients accessing other
231.
by Boulth 8y ago
Nowadays it's probably 5C, or 5 if you need USB-A connector. An added benefit of Yubikey backed keys is touch to use so that you need to physically touch the token to use the key. A critical matter when using ForwardAgent! [0]: https:
232.
by Boulth 8y ago
For paranoid users there is also an option of running their own servers and clients (both Prosody and Conversations are open source). XMPP at least provides that option and if you choose it you can still communicate with the rest of the eco
233.
by Boulth 8y ago
Thanks for the link, it appears to be from 2004. > The people who need it the most do not understand the difference between OMEMO and OTR, For most of them there won't be any difference. Modern clients do not implement OTR so people
234.
by Boulth 8y ago
> It supports S/MIME. Do you want S/MIME? (You don't.) Could you provide your source? I've never seen S/MIME used in XMPP. Client certificates for authentication sure but not for E2E security. > It supports OT
235.
by Boulth 8y ago
Oh I think I used ssh pageant [0] once and Putty support in GnuPG, I think it was more reliable (I don't remember clearly, sorry for that!) [0]: https://github.com/cuviper/ssh-pageant
236.
by Boulth 8y ago
They are using GPG Authentication subkeys for SSH. I have them on a smartcard and it works really well (you can also connect Yubikey 4C to Android via OpenKeychain and login to servers using Termbot on the go using hardware stored keys - se
237.
by Boulth 8y ago
> nor get my GPG and SSH keys for Github working. This definitely works, I've used it back in the day (needs "enable-ssh" in config).
238.
by Boulth 8y ago
There are efforts to encrypt it: https://tools.ietf.org/html/draft-ietf-tls-esni-01
239.
by Boulth 8y ago
Yes, that's exactly how U2F works (it's scoped to domain/origin). FIDO2 builds on top of that.
240.
by Boulth 8y ago
Byzantine is a synonym to "convoluted": https://www.thesaurus.com/browse/byzantine?s=t

More ›