News for hackers. Stuff that matters.

A comment on Mailpile – taking e-mail back. Parent comment

Re:Mailpile – taking e-mail back by noselasd on Tuesday August 20, 2013 @03:01PM (#6245830)
What needs to happen for this to become generally usable is for the crypto part to be built into the browser - that way you only need to trust your browser and not a somewhat random plugin, nor the .js being served from a particular server.

And it'll "just work", so ordinary people have a chance to use and trust it too.

[ Parent | on HN ]
Re:Mailpile – taking e-mail back by tlrobinson on Tuesday August 20, 2013 @03:14PM (#6245907)
Sure, eventually, however I'd be just as comfortable using a plugin from, say, the EFF as I would having it built into the browser. It would be a fine stepping-stone (similar to how Google Gears contained many features which influenced HTML5)

And as I mentioned, merely having the crypto parts and key management built into the browser isn't good enough because a malicious site could still trick you into decrypting data which it could then steal, even if the keys themselves are perfectly safe.

[ Parent | on HN ]