Global Encryption Day: Encryption's Critical Role in Safeguarding Human Rights

Re:Global Encryption Day: Encryption's Critical Role in Safe... by alwayslikethis on Sunday October 22, 2023 @07:01PM (#37979851)

I agree with the sentiment, but I question how useful this would really be. Most people nowadays unfortunately use web clients, so the keys are going to have to be stored somewhere else, since backing up a browser's local storage is no easy task. If you don't have sole access to keys, but rather the keys are controlled by the same entities that control your email, I don't think there will be any benefit.

[ Parent | on HN ]

Re:Global Encryption Day: Encryption's Critical Role in Safe... by americanriver on Sunday October 22, 2023 @07:29PM (#37980010)

There are plenty of email users on IMAP, and they use web mail to host mail storage. The IMAP clients can do S/MIME (or PGP I suppose).

The bigger problem is trustworthy user discovery service i.e. a directory to exchange public keys. This exists at an enterprise level (active directory) but not globally.

[ Parent | on HN ]

Re:Global Encryption Day: Encryption's Critical Role in Safe... by 3c6bYDXLMj on Sunday October 22, 2023 @07:52PM (#37980129)

Usually anyone that buys into the viability of PGP email will also tell me with a straight face that the MIT keyserver is completely appropriate for civilians.

[ Parent | on HN ]

Re:Global Encryption Day: Encryption's Critical Role in Safe... by Metus on Sunday October 22, 2023 @07:21PM (#37979968)

I have similar doubts as well. Especially considering that digital signatures and encryption do not protect against impersonation attacks, like phishing via facebok.com or other similar sounding domains, in either the case of websites or email. But without widespread use you don't even have the option.

[ Parent | on HN ]

Re:Global Encryption Day: Encryption's Critical Role in Safe... by iggldiggl on Monday October 23, 2023 @10:44AM (#37986370)

Search is another problem, because instead of simply being able to rely on server-side full text search, every client needs to download all mails, decrypt them all and then create and maintain its own local search index.

[ Parent | on HN ]