kingzero

5 ms·

1. 1.▲
   by kingzero 12y ago

   > Can we recognize that this is a good first step, and definitely constitutes a huge improvement over gmail/yahoo type webmail solutions? No its not. "Browser crypto" in the form of JS is broken. There are many different p
2. 2.▲
   by kingzero 13y ago

   More on this topic can be found in this talk by djb. https://www.youtube.com/watch?v=K8EGA834Nok
3. 3.▲
   by kingzero 13y ago

   Same here. So i checked what ciphersuits they use. TLS_RSA_WITH_RC4_128_SHA Too bad they cant correctly set up their servers ...
4. 4.▲
   by kingzero 13y ago

   Before, the https version of bing only showed a blank page. Seems like MS finally fixed it.
5. 5.▲
   NTRU public key crypto released to open source community(net-security.org)

   2 points by kingzero 13y ago|0 comments
6. 6.▲
   by kingzero 13y ago

   > No, as explained in the writeup, the server stores your private key encrypted with your passphrase. The server never sees your passphrase, or your private key. The only place a private key belongs to is the users machine (preferably so
7. 7.▲
   by kingzero 13y ago

   > As mentioned in the writeup, there's a beautiful way you can protect even non-power-users. Because the extension downloads and verifies the webapp HTML, CSS and JS every time it runs, the web app is constantly being validated. Ima