onereplyac

4 ms·

1.
by onereplyac 3y ago
Totally agree... it is just disappointing that services like Skiff advertise total E2EE to unsuspecting users with no mention of this in their marketing, luring users into a false sense of security
2.
by onereplyac 3y ago
Free marketing at the expense of user trust
3.
by onereplyac 3y ago
Unfortunately not even close. When the server gets the email it is not encrypted (unless the sender has a skiff address too, which is a very tiny portion...). And when you send an email to anyone outside skiff it is the same problem, the em
4.
by onereplyac 3y ago
The encryption happens after the server recieves the plaintext email and passes it to the client...
5.
by onereplyac 3y ago
Normal email proiders don't dowbload all emails whenever a user logs into a new device
6.
by onereplyac 3y ago
That's all moot though, since your server has access to plaintext emails when sending and recieving (99.99999% of email addresses would be outside skiff), which completely subverts the whole point of encryption. A vulnerability on the
7.
by onereplyac 3y ago
Depends, on an older phone, downloading all emails just to allow for searches locally won't be very efficient. Log out also becomes a problem, if emails are stored on one device that gets stolen, adversary now has access to the local i
8.
by onereplyac 3y ago
Except there is a reason. Encrypting email has very little to no benefit, since it is transmitted in plaintext and usually stored in plaintext on the recipient's side, your emails almost always exist in unencrypted form. On top of that
9.
by onereplyac 3y ago
From the whitepaper, it seems search is done by downloading all emails on every device to index them locally. Curious how well this works with a large amount of emails?
10.
by onereplyac 3y ago
It really is not backed by cryptographic security at all. Since your server has access to plaintext emails when sending and recieving (99.99999% of email addresses would be outside skiff), which completely subverts the whole point of encryp