Live data from Hacker News

Roundcube Webmail 1.2.0 released with PGP support

roundcube.net

11–20 of 71 posts

Re: Roundcube Webmail 1.2.0 released with PGP support

#13
It's nice to hear about the server-side PGP support (searching!), although it's unfortunate that the client-side solution, Mailvelope (or more specifically, the OpenPGP.js library it uses), still doesn't support any ECC algorithms.

Fortunately Google's End-to-End extension does support ECC algorithms (no idea if it integrates with Roundcube though), but it seems like it still isn't ready for production distribution on the Chrome Web Store yet.

Re: Roundcube Webmail 1.2.0 released with PGP support

#17
post #13

It's nice to hear about the server-side PGP support (searching!), although it's unfortunate that the client-side solution, Mailvelope (or more specifically, the OpenPGP.js library it uses), still doesn't support any ECC algorithms. Fortunately Google's End-to-End extension does support ECC algorithms (no idea if it integrates with Roundcube though), but it seems like it still isn't ready for production distribution o…

I may be wrong (and hope to be corrected!), but I think that End-to-End is never expected to be in the Chrome Web Store. I think they feel that this kind of encryption is too complicated for the average user. It's intended more for "power users" who already know that they want it.

Re: Roundcube Webmail 1.2.0 released with PGP support

#18
post #13

It's nice to hear about the server-side PGP support (searching!), although it's unfortunate that the client-side solution, Mailvelope (or more specifically, the OpenPGP.js library it uses), still doesn't support any ECC algorithms. Fortunately Google's End-to-End extension does support ECC algorithms (no idea if it integrates with Roundcube though), but it seems like it still isn't ready for production distribution o…

I may be wrong (and hope to be corrected!), but I think that End-to-End is never expected to be in the Chrome Web Store. I think they feel that this kind of encryption is too complicated for the average user. It's intended more for "power users" who already know that they want it.

They've discouraged people from compiling builds and then uploading it to the store, but I believe this is because they don't want a half-implemented/untested PGP library posted -- especially one with their name on it.

I haven't seen any concrete plans about how they plan to distribute it when it's done, but I didn't get the same sense about them not wanting to upload it themselves. In fact, I think Google would be thrilled to push proper end-to-end support in Gmail.

Post reply on HN