News for hackers. Stuff that matters.
Re:Show HN: gpgsend.com - encrypted emails from your browser. by mtogo on Sunday September 25, 2011 @01:50PM (#3036271)
| What about SSL?

| SSL will not be helpful here, since no sensitive information is ever sent to this server. All encryption is done BEFORE it leaves your computer!

This made me cry.

And that's not even mentioning that I'm typing a possibly sensitive message into your app and just hoping that you're going to encrypt it with the right key and not read it yourself.

Re:Show HN: gpgsend.com - encrypted emails from your browser. by shocks on Sunday September 25, 2011 @02:05PM (#3036322)
Heh, yeah I guess you are right. Getting an SSL certificate now. Not sure what to do about "proving" I'm not doing anything untoward with the message?
Re:Show HN: gpgsend.com - encrypted emails from your browser. by tptacek on Sunday September 25, 2011 @02:09PM (#3036334)
You really can't, but that unfortunately doesn't make it not an issue.
Re:Show HN: gpgsend.com - encrypted emails from your browser. by shocks on Sunday September 25, 2011 @04:49PM (#3036708)
I am going to put the source code up on GitHub, so if people really don't trust me that can run their own! :)
Re:Show HN: gpgsend.com - encrypted emails from your browser. by tptacek on Sunday September 25, 2011 @07:49PM (#3037094)
Nobody is suggesting that they don't trust you, are they? I'm just observing how bad web browsers are for the kind of UX you hope to have.