Re:Security by obscurity is underrated
by somedude11 on Friday September 11, 2020 @02:56PM
(#24446128)
The same with "GnuPG is bad" mantra on hackernews. There is nothing better that GPG currently for all its functionality and the only answer you get when asking for substitute is don't use this function or use some obscure application. Yeah right.
[ Parent
| on HN ]
Re:Security by obscurity is underrated
by fractionalhare on Friday September 11, 2020 @04:16PM
(#24446881)
I agree that there is nothing better than GPG for the narrow scope of encrypting email. But I think there are very few cases where encrypted email is the most secure way to communicate, in lieu of other forms of encryption.
Re:Security by obscurity is underrated
by somedude11 on Friday September 11, 2020 @05:38PM
(#24447590)
Encrypted email is almost a marginal usage scenario for GPG compared to other uses. It does everything. It is everywhere.Yes it is big, nobody has to use all of it. Just like C++... oh wait it is unpopular on hacker news bubble too despite being a juggernaut of a language. It will still be relevant long after hacker news will be no more.
Re:Security by obscurity is underrated
by samatman on Friday September 11, 2020 @06:41PM
(#24448073)
I basically use GPG for one thing, at this point: signing git commits.
As far as I know, there isn't another GitHub/GitLab compatible way to do this. So I'll keep using GPG until there is.
Age is demonstrably better: https://github.com/FiloSottile/age
Also, an informed analysis of PGP: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
Re:Security by obscurity is underrated
by anonymousse1234 on Saturday September 12, 2020 @04:26AM
(#24450869)
Informed analysis like lack of forward secrecy in something made for non ephemeral communication - for storing, sending files, digital signatures etc. Or backwards compatibility so you can access and verify your backups, archives etc. from 10 or more years ago.
Show me ephemeral encryption scheme for something that needs to be readable in the future like that.
This analysis is highly uninformed I would say.