News for hackers. Stuff that matters.

A comment on Tutanota: GPLv3-licensed, end-to-end encrypted email.

Re:Tutanota: GPLv3-licensed, end-to-end encrypted email by jmnicolas on Wednesday December 03, 2014 @05:34AM (#8692926)
I'm waiting for someone respected in the crypto circles reviewing their crypto soundness before even considering using this.

Being GPL is a good point but it doesn't mean they don't have a fatal flaw in their code.

I wish I had the skills to review the crypto I use.

[ Parent | on HN ]
Re:Tutanota: GPLv3-licensed, end-to-end encrypted email by tptacek on Wednesday December 03, 2014 @10:23AM (#8694152)
It's hosted web mail that does crypto in Javascript. How closely do you expect crypto engineers to look at it?

Don't use web mail for secure messaging.

[ Parent | on HN ]
Re:Tutanota: GPLv3-licensed, end-to-end encrypted email by icebraining on Wednesday December 03, 2014 @07:48AM (#8693410)
They say it was "subject to an extensive penetration test by the SySS GmbH", but don't point to any report or even quote the conclusions.
[ Parent | on HN ]
Re:Tutanota: GPLv3-licensed, end-to-end encrypted email by jokoha on Wednesday December 03, 2014 @07:25AM (#8693323)
Yes, I love the service, someone respected looking into the crypto would be fantastic!
[ Parent | on HN ]