News for hackers. Stuff that matters.
Re:Stop Using Encrypted Email by thayne on Thursday February 20, 2020 @04:07AM (#22373755)
For a specific, common usecase, what should be used for submitting security bugs for software?

Another concern I have with the proposed replacments is many (Signal, Keybase, etc.) depend on a single centralized service.

Re:Stop Using Encrypted Email by anchpop on Friday February 21, 2020 @02:59PM (#22386197)
The idea with Keybase (can't speak for signal) is that your client doesn't need to trust the server. You only need to trust that your client isn't compromised, which is easier to verify.
Re:Stop Using Encrypted Email by thayne on Saturday February 22, 2020 @01:36AM (#22389744)
Sure (and that's true for signal as well), that's not my point. My point is you have to rely on that service being available. And you need to trust it to deliver and (at least with keybase) persist your encrypted data. And if that service becomes as prevalent as email, that gives the organization that controls it a lot of power.