News for hackers. Stuff that matters.
Re:Facebook Is Ending Support for PGP Encrypted Emails by repelsteeltje on Friday November 10, 2023 @05:35AM (#38217241)
> Once a hacker gains access to a Facebook account, they can proceed to activate email encryption.

> This renders recovery emails sent to the user’s email address unreadable, as only the hacker has the encryption keys.

So: PGP encrypted emails were rarely used, except to lock out the legit user after account was compromised.

Re:Facebook Is Ending Support for PGP Encrypted Emails by sebstefan on Friday November 10, 2023 @06:06AM (#38217476)
Github asks you to log in again to add SSH keys in, this could've been similar

They're just looking for excuses

Re:Facebook Is Ending Support for PGP Encrypted Emails by crtasm on Friday November 10, 2023 @06:45AM (#38217714)
A lot of account compromise is due to reused passwords so I'm not sure that's a complete solution.
Re:Facebook Is Ending Support for PGP Encrypted Emails by Kwpolska on Friday November 10, 2023 @06:55AM (#38217800)
Sending a PGP-encrypted email with a verification link to activate the feature should solve that.
Re:Facebook Is Ending Support for PGP Encrypted Emails by westurner on Friday November 10, 2023 @11:53AM (#38221170)
What are the disadvantages of only signing (and not encrypting the message body of) account reset emails?
Re:Facebook Is Ending Support for PGP Encrypted Emails by sebstefan on Friday November 10, 2023 @09:03AM (#38218931)
The point is that much more sensitive things exist online and it's a solved problem
Re:Facebook Is Ending Support for PGP Encrypted Emails by jhanschoo on Friday November 10, 2023 @09:56AM (#38219600)
What use case for FB relies on this feature?
Re:Facebook Is Ending Support for PGP Encrypted Emails by martin_a on Friday November 10, 2023 @06:20AM (#38217555)
Almost sounds like a feature. :-)