Here it is: https://news.ycombinator.com/item?id=22372005

That was a straightforward observation that the writer of the original article was being pointlessly condescending and that they were alienating the people they were ostensibly trying to help.

In general, personally attacking your audience is not an effective writing technique.

He isn't talking to the people who already use encrypted email. He's talking to those who haven't made up their mind, yet, and since his goal is not to help anyone, but to increase adoption of his favorite solution, portraying the "competition" as hopeless nerds who lost contact with reality, might be an effective strategy.

> personally attacking your audience is not an effective writing technique

Absolutely true. So whenever a writer appears to be attacking their audience, you may have misidentified the audience.

Disagree with pointless. I'm just some guy but I've noticed encrypted email booming in popularity the last few years. Seems like every second nerd I know uses proton now.

Assuming these guys have been fighting the good fight the whole time, I can see why a hail mary switch in tone could be warranted. They're losing. Just staying the path and being agreeable and conciliatory would be what is pointless.

Even if there actually was some sort of ongoing email encryption crisis the snark was still pointless. That is not how you convince anyone of anything. That just expresses your anger.

In general, encrypting email is a good thing in the same way enabling TLS is a good thing. One can quibble about the details, but it is absurd and harmful to suggest it should not be done at all. So the snark seemed fairly unreasonable in this article as it doesn't addressing the root issue.

Exactly, I can agree with email being difficult to secure but for most of humanity that has to use it, any security improvements should be taken.

I personally think the viewpoint of the author was not only incorrecr but dangerous. Being condescending leads many to believe the author has such an authority over the subject that they can get away with it (which is never the case, being smart never gives you a right to look down on others,not that I am accusing the author of that).

To me, the condescending tone of the writing is masking inherent flaws in the argument being made. It's hard for anyone to challenge someone who obviously knows more than them when they appear to be obviously wrong, the condescending tone discourages discourse that would otherwise have lead all involves parties to a better understanding of the technical subject.

Good call. That's an excellent example of Paul's idea in action.

In calling that OP's style rude, respondents are really equivocating on the OP's central point. The OP is demonstrating Paul's 'Strength' concept by boldly asserting "all encrypted email is not fit for purpose" in an unequivocal way. The respondents seem to agree in part but disagree at the edges and want the OP to accept qualifiers.

It's just setting the tone of the discussion. Emotionally charged writing can be fun to read but can also be tiresome especially at length.

This is how I read it too. The problem was not the to-the-point critique, it's the author's emotions leaking into the writing.

This is not politics, it is a technical matter. Being correct is important not being loud or bold! The authors argument is infuriantingly wrong and dangerous even. If you disagree show me which part of the post describes any specific risk, any specific threat or a comparison showing the marvelous benefits of not encrypting email? I mean until this post I didn't think anyone hated email more than myself, but emotions should not triumph logic. I have seen first hand unencrypted email being used against users. The tone of the writing distracted from a calm technical discussion. A missed opportunity!

That essay was confusing because it says "encrypted email" without defining it, and the arguments are too strong; they could be used to argue that you shouldn't use email at all.

The essay isn't confusing in general just because you were confused when you read it. There isn't a single argument in that essay that depends on which flavor of encrypted email is used, so being specific about that would only weaken the points being made. The essay is also pretty clear in saying that email can be used for stuff that doesn't need to be kept secret, and that it's not fit for anything that does.

So is it saying that big email providers like GMail shouldn't opportunistically encrypt email in transit or at rest? Or that we should avoid email services that do?

Clearly not as there is no harm in it, the UI is unchanged, and it prevents certain attacks. You have to know that by "encrypted email" means "end-to-end encrypted email" to make any sense of the essay, otherwise the claim is too broad. It states the claim being defended poorly.

The article is clearly discussing E2E encryption between consumers of email and quite clearly uses PGP as a relevant example.

It even mentions hop-to-hop TLS of email as an obviously good idea (and presumably would likewise say at rest encryption is a good idea). None of this matters to the author's fundamental point. End to end encryption in email is silly and can't work because it isn't enforced at the protocol level.

You either haven't read the article or haven't understood it.

Edit: or disagree with its fundamental claim, but are talking about irrelevant issues instead for some reason.

It makes the following claims:

* encryption of email in transit is good because it does provide some security against things like dragnets.

* attempts to bolt end-to-end encryption on email, regardless of what tools you use, are insufficient to provide any real security against the kinds of threats you generally use end-to-end encryption against.

* If you need secure messaging, use Signal

* If you need to send documents securely, use Magic Wormhole or age

EDIT: and if you don't need secure messaging, then continue to use email

Not that I want to perpetuate a discussion about my post on this thread, but "use Signal" isn't the claim we make; "use any modern secure messenger, they are all better than email" is the claim we made.

Fair enough. I was attempting to be succinct, but the correction is appropriate (I believe you did say that Signal was "standard" and "best").

Btw, I did find your essay persuasive. In my search for a paid email provider (as an alternative to Gmail) I've decided not to go for one that uses E2E encrypted email. If I need secure messaging, I'll use Signal (or something similar) but for email I would rather go for features and ease of use than E2E encryption.

If you read the essay, the scenarios being considered and the type of security desired are pretty clear from the examples.

And then you realize that things like "providers opportunistically encrypting in transit or at rest" are largely irrelevant to having truly secure communications. You could have a conversation about "is Gmail less bad than Outlook.com" or whatever, but the whole point of the essay is that neither are meaningfully different if you have important secrets.

"Truly secure communications" isn't all that matters when discussing email security.

There are meaningful differences in the scale of access. It matters whether the NSA (or China or whoever) can just read everyone's email off the network, versus law enforcement sending requests to email providers where they are verified to be legal. It's the difference between lawful access and espionage.

Gmail.com uses HTTPS. Already encrypted. /s