Viewing profile — tanx

I'm completely missing a discussion about federation. Sure TextSecure and iMessage solve UX in a great way. But what about business requirements that email/PGP does solve? More in …

I updated the post with more detailed threat modeling and SSH as a TOFU case study for UX. Thx for the feedback everyone!

Yes. It gossips with the following list of servers. Keys are uploaded and also fetched form these servers: ' https://pgp.mit.edu' , ' http://pool.sks-keyservers.net' , ' http://key…

We're currently in the process of simplifying the key sync spec. The new version will store your private key encrypted with a strong random passphrase in IMAP. So it's similar to y…

Hey Tankred from Whiteout here, Felix and me will be at the event in April as well. So we can chat there. We think keybase's concept is great and also look forward to what the E-2-…

My email is tankred@whiteout.io

Thanks for for reply. I'm wondering if you know if it's possible to use the AES-CFB mode from the Web Crypto Apis, since the OpenPGP CFB (resync) mode seems to have special require…

I'm a contributor to OpenPGP.js. I understand your choice as the code was indeed in quite bad shape several months ago. I do want to point out though, that the code has gone throug…

I wrote a blogpost on Heartbleed and JavaScript Crypto to discuss a potential additional layer of security on top of ssl. Looking forward to your feedback!