News for hackers. Stuff that matters.

A comment on GPG and Me. Parent comment

Re:GPG and Me by napoleond on Tuesday February 24, 2015 @08:17PM (#9104751)
What do you think that looks like, though? Is it TextSecure on the desktop, with file attachments? Is it Pond? Is it just email, but with a different crypto layer?

I feel like a lot of the things GPG aims to do are fundamentally hard. It's not the technology that sucks, it's the problem. I completely agree that the answer will come from thinking about user interactions first, but I'm not sure that the solution will look much different than a better GPG client.

[ Parent | on HN ]
Re:GPG and Me by moxie on Tuesday February 24, 2015 @09:12PM (#9104894)
I don't have a definite answer. There's the path we're executing on at Open Whisper Systems, but there are a bunch of other projects working in this area as well (Mailpile, LEAP, etc).

I think the problems are solvable, but only if we have a different design approach. So when I see projects trying not-PGP, I'm interested. When I see projects building on PGP, I'm less interested.

[ Parent | on HN ]
Re:GPG and Me by unicornporn on Wednesday February 25, 2015 @01:58AM (#9105633)
I'll take the opportunity to say that it saddens me that I still can not communicate using TextSecure with iOS users. It's been almost two years[1] since iOS support was "promised". TS is great, but we need to be able to communicate with iOS users.

[1] https://whispersystems.org/blog/sure/

[ Parent | on HN ]
Re:GPG and Me by Johnny_Brahms on Wednesday February 25, 2015 @07:02AM (#9106318)
Signal 2.0 was tagged on github 3 days ago and will bring the textsecure protocol to iOS whenever apple is done reviewing it.
[ Parent | on HN ]
Re:GPG and Me by unicornporn on Wednesday February 25, 2015 @07:19AM (#9106367)
If this is true, it's awesome. I've tried making contact between Signal on iOS with TextSecure on Android before, without luck.
[ Parent | on HN ]
Re:GPG and Me by patcon on Wednesday February 25, 2015 @01:32PM (#9108532)
Not the place :/
[ Parent | on HN ]
Re:GPG and Me by higherpurpose on Wednesday February 25, 2015 @08:32AM (#9106598)
What do you think of Peerio?

Also, any vague timeline available for arrival of the desktop Signal version? What about video-chat support? Would that be possible with WebRTC? (although you should probably wait until ORTC is supported within WebRTC - v1.1 I think?) and then add ZRTP on top of it. Or is a desktop, Javascript version, just not secure enough for that to happen? What if you do it like Whatsapp's "web app", that basically only connects locally to the phone?

[ Parent | on HN ]
Re:GPG and Me by vetler on Wednesday February 25, 2015 @03:43AM (#9105877)
> It's not the technology that sucks, it's the problem.

This is my feeling as well. To optimize for security and privacy, it seems like it needs to be difficult by design. If it's too easy, it's probably less secure.

I'm not sure if anyone has given it seriuos attempts to make it more user friendly, though? Would be surprised if no one has, there should be a great opportunity here. Escpecially now that it has so much focus.

[ Parent | on HN ]
Re:GPG and Me by higherpurpose on Wednesday February 25, 2015 @08:28AM (#9106576)
Peerio might work, but it hasn't been vetted too much yet:

http://peerio.com/

It's made by the CryptoCat author, so make of that what you will.

[ Parent | on HN ]
Re:GPG and Me by tP5n on Wednesday February 25, 2015 @09:22AM (#9106814)
No linux support, no firefox support.

Literally the second tweet on their twitter account is 'Damn, it works. Got a lawyer who resisted all other methods to encrypt our comms with @Peerio. Big score for usability. Bravo @kaepora & co.' which kind of bugs me, too.

[ Parent | on HN ]
Re:GPG and Me by qznc on Wednesday February 25, 2015 @04:04AM (#9105929)
I also believe that some complexity is inherent to secure communication, so people are required to learn a little to properly use this. Hopefully, this will be taught in high school or earlier at some point.

However, I also (like Moxie) believe PGP is not at the sweet spot. It has too much complexity for the most popular use cases. Thank you Moxie and others who are searching for the sweet spots.

[ Parent | on HN ]