News for hackers. Stuff that matters.

A comment on Rpgp: Pure Rust implementation of OpenPGP. Parent comment

Re:Rpgp: Pure Rust implementation of OpenPGP by mdhb on Monday April 08, 2024 @01:51AM (#39966592)
The context was what are things that those with more or less unlimited resources can do in order to read your signal messages.

They are 3 particular paths that aren’t in any way open to most attackers but will work here.

Saying it impacts all applications isn’t wrong but it’s also not relevant to what was asked.

If whatever the hell you are doing requires a threat model where the NSA is interested in finding out who you are talking with and what you are saying the original comment of signal is inappropriate is 100% accurate.

[ Parent | on HN ]
Re:Rpgp: Pure Rust implementation of OpenPGP by tptacek on Monday April 08, 2024 @09:43AM (#39969635)
If your threat model involves NSA finding out who is talking to you, PGP literally doesn't help you at all: it doesn't protect metadata.
[ Parent | on HN ]
Re:Rpgp: Pure Rust implementation of OpenPGP by mdhb on Monday April 08, 2024 @05:45PM (#39974052)
Just to be clear I’m not advocating for PGP at almost any point in time, especially not in 2024.
[ Parent | on HN ]
Re:Rpgp: Pure Rust implementation of OpenPGP by tptacek on Monday April 08, 2024 @05:59PM (#39974173)
Ok, sure! Just: this is a thread about why WhatsApp and Signal are so much more successful than PGP, and the argument given was that they sacrificed security to get their popularity. No, that's not it.
[ Parent | on HN ]