Why Can't My Mom Email Me?

Re:Why Can't My Mom Email Me? by marcus_holmes on Thursday April 11, 2024 @01:32AM (#39998699)

As I read it, that's their point. They're responding to people who are asking them "why don't you do PGP?" (like Proton does), and their answer is a pretty well-reasoned "because that doesn't make much sense - it doesn't mitigate against any actual threats".

Which kinda begs the question about what Proton thinks they're doing by implementing PGP on behalf of their users...?

[ Parent | on HN ]

Re:Why Can't My Mom Email Me? by twiss on Thursday April 11, 2024 @06:31AM (#40000632)

We implement OpenPGP client-side, on the user's devices. Their central complaint of

> If it’s running in the browser with code downloaded from our servers, then if we get compromised, we can serve up a version of the PGP code which leaks keys or plaintext.

is well-known but only applicable to the web app, the other clients are less susceptible to this. Even for the web app, we are proposing to solve this problem: https://github.com/twiss/source-code-transparency

[ Parent | on HN ]

Re:Why Can't My Mom Email Me? by marcus_holmes on Thursday April 11, 2024 @11:27AM (#40003229)

thanks for the clarification. I'm a happy Fastmail user, but I appreciate that other people have different ideas

[ Parent | on HN ]