News for hackers. Stuff that matters.

A comment on Facebook Is Ending Support for PGP Encrypted Emails. Parent comment

Re:Facebook Is Ending Support for PGP Encrypted Emails by repelsteeltje on Friday November 10, 2023 @05:45AM (#38217308)
It's just a DoS attack. If valid PGP pubkey is added to account, the account recovery email becomes useless because it's encrypted gibberish that cannot be deciphered unless you have PGP private key.
[ Parent | on HN ]
Re:Facebook Is Ending Support for PGP Encrypted Emails by perihelions on Friday November 10, 2023 @05:48AM (#38217329)
Can you associate a PGP pubkey to an email address, in Facebook's workflow, without verifying access to that address?
[ Parent | on HN ]
Re:Facebook Is Ending Support for PGP Encrypted Emails by repelsteeltje on Friday November 10, 2023 @05:55AM (#38217388)
Not sure, I don't use Facebook. I suppose that if you have access to the account and are able to associate PGP, you might as well change the recovery email address too if hacker doesn't already have a way to read it.
[ Parent | on HN ]
Re:Facebook Is Ending Support for PGP Encrypted Emails by citrin_ru on Friday November 10, 2023 @05:52AM (#38217359)
A new key can (should) be activated only if a user can confirm that they can read messages encrypted with this key sent to a configured account recovery email.
[ Parent | on HN ]