News for hackers. Stuff that matters.
Re:Stop Using Encrypted Email by matheusmoreira on Wednesday February 19, 2020 @11:27PM (#22372671)
Not all of PGP is bad though. PGP is really hard to use but it's still useful for signing, file encryption and authentication. Encrypted email has been outclassed in every way by modern messaging applications such as WhatsApp and Signal but currently PGP is the only good way to sign code.
Re:Stop Using Encrypted Email by lallysingh on Wednesday February 19, 2020 @11:35PM (#22372698)
The good parts are just enough to be bait, frankly.

Code signing is probably the only use case left for it.

Edit: nope a quick Google search finds specialized tools. They can't be harder to use or screw up than PGP, so automatically better.

Re:Stop Using Encrypted Email by lvh on Thursday February 20, 2020 @08:39AM (#22374967)
Yep, see signify/minisign and OpenBSD as an example of it being used in practice.
Re:Stop Using Encrypted Email by tptacek on Thursday February 20, 2020 @12:01AM (#22372805)
It is good for literally none of those things. See the link in the post.
Re:Stop Using Encrypted Email by zelphirkalt on Thursday February 20, 2020 @04:51AM (#22373907)
Yeah surely not by Whatsapp / Facebook. It's proprietary code afaik and the possibility of third key exists for that reason. It's not trustworthy at all, especially considering the company owning it, who also told users in the past, that the data of WA and FB would never be merged or used together. WA is laughable in the context.