News for hackers. Stuff that matters.

A comment on Ask HN: Is sending passwords a good use of JS crypto?. Parent comment

Re:Ask HN: Is sending passwords a good use of JS crypto? by tptacek on Tuesday March 04, 2014 @04:13PM (#7343190)
There is virtually no correlation between the people who need to have their secrets protected from hostile governments and the people who are savvy enough not to use applications that make security promises they can't keep.
[ Parent | on HN ]
Re:Ask HN: Is sending passwords a good use of JS crypto? by mballantyne on Tuesday March 04, 2014 @04:21PM (#7343249)
The security promise is simply "this is better than plaintext email, which is what you'd use otherwise."

I'd rather have as much of my communication as possible protected from mass collection by my own government regardless of it's sensitivity.

Edit: Misunderstood your phrasing a little. Yes, ideally we would provide non-savvy users with trivially easy to use encryption strong enough to defeat hostile governments. I haven't seen it yet. I make no pretense of overpromising - I'd certainly expect a service such as I'm describing to prominently note that it shouldn't be used for material above a certain sensitivity and link to info on better options.

[ Parent | on HN ]