Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Roundcube Webmail 1.2.0 released with PGP support

roundcube.net

Post reply on HN
Print view View original

41–50 of 71 posts

Re: Roundcube Webmail 1.2.0 released with PGP support

#41

Post by SquareWheel »

ryanl0l wrote: post #35
SquareWheel wrote: post #33

Earlier quoted context omitted.

They couldn't. They would have to show ads from other history and not the email's contents. This would also break features such as (server-side) search and reminders (eg. flight tomorrow) via Google Now. End-to-end is a tradeoff. But presumably they wouldn't be working on the technology if they weren't prepared to offer it in some fashion. Probably as an opt-in? Hopefully a Googler can offer more insight as I can onl…

>They couldn't. They would have to show ads from other history and not the email's contents. This would also break features such as (server-side) search and reminders (eg. flight tomorrow) via Google Now. Sure they could, all incoming emails aren't magically going to become e2e encrypted.

Well, no. But that's not really end-to-end, is it?

If the goal is to make E2E more accessible then eventually more emails will come in encrypted. Maybe Google will let users with the extension find each other, or Gmail might help coordinate that.

Re: Roundcube Webmail 1.2.0 released with PGP support

#42

Post by taneliv »

bildung wrote: post #29
xvilka wrote: post #25

I recommend to try also Mailpile [1], which was built with security in mind. [1] https://www.mailpile.is/

As far as I understood Mailpile is a mail user agent, so not comparable. Roundcube runs on a server, Mailpile runs on your own computer.

"You can [then] access it over the network using your web browser" https://www.mailpile.is/faq/#wha-2 seems to challenge your knowledge. I don't know if using it so compromises privacy in unexpected ways, or indeed even works satisfactorily; I am not a user.

Re: Roundcube Webmail 1.2.0 released with PGP support

#43

Post by JohnTHaller »

unethical_ban wrote: post #40
gravypod wrote: post #39

Earlier quoted context omitted.

I came here to comment about this. Rainloop is amazing. It also has some extra security features for the end user. For instance, you can tell Rainloop to proxy images from the email and serve them to you instead of your browser getting them from a remote source. It's amazing because you get faster load times and don't leak your desktop IP, only whatever server your running Rainloop on. The only thing it's lacking is…

Wait, the parent said Rainloop has PGP. That's why they brought it up.

The features page states: " Client Side OpenPGP (JS) "

Re: Roundcube Webmail 1.2.0 released with PGP support

#44

Post by lmm »

rmoriz wrote: post #15

I wish someone would do this for S/MIME. S/MIME has native support in many MUAs, even Mail.app on iOS. http://smime.io/ https://github.com/roundcube/roundcubemail/issues/4977

Can you get a free S/MIME certificate? Even if you could, S/MIME leaves you dependent on CA infrastructure that's often state-controlled.

Re: Roundcube Webmail 1.2.0 released with PGP support

#46

Post by gravypod »

JohnTHaller wrote: post #43
unethical_ban wrote: post #40

Earlier quoted context omitted.

Wait, the parent said Rainloop has PGP. That's why they brought it up.

The features page states: " Client Side OpenPGP (JS) "

It's not fully implemented from what I understand.

Re: Roundcube Webmail 1.2.0 released with PGP support

#47

Post by ryanl0l »

SquareWheel wrote: post #41
ryanl0l wrote: post #35

Earlier quoted context omitted.

>They couldn't. They would have to show ads from other history and not the email's contents. This would also break features such as (server-side) search and reminders (eg. flight tomorrow) via Google Now. Sure they could, all incoming emails aren't magically going to become e2e encrypted.

Well, no. But that's not really end-to-end, is it? If the goal is to make E2E more accessible then eventually more emails will come in encrypted. Maybe Google will let users with the extension find each other, or Gmail might help coordinate that.

Sure, but I'd imagine that most email traffic is automated non-sensitive stuff (i.e. flight confirmations for example). That stuff is simply not going to be e2e encrypted any time soon, if ever.

Are people going to start filling in their pubkeys when they book a flight? What about when they're at the airport and need to pull up the record locator on a different device?

I'm sure more emails will start being encrypted, but that'll mostly be communications between people. Those probably aren't particularly interesting to google anyway.

Re: Roundcube Webmail 1.2.0 released with PGP support

#48

Post by elgaton »

lmm wrote: post #44
rmoriz wrote: post #15

I wish someone would do this for S/MIME. S/MIME has native support in many MUAs, even Mail.app on iOS. http://smime.io/ https://github.com/roundcube/roundcubemail/issues/4977

Can you get a free S/MIME certificate? Even if you could, S/MIME leaves you dependent on CA infrastructure that's often state-controlled.

StartSSL [1] and COMODO [2] still offer them (of course, there's still the CA compromise issue you mentioned). Keep in mind, however, that a hierarchical, centralized trust model can still be useful (e.g. in medium-to-large organizations, where having an internal CA and delegating identity verification to a few knowledgeable employees is more practical than having everyone build a web of trust).

[1] https://www.startssl.com/

[2] https://www.comodo.com/home/email-security/free-email-certif...

Re: Roundcube Webmail 1.2.0 released with PGP support

#49

Post by bildung »

taneliv wrote: post #42
bildung wrote: post #29

Earlier quoted context omitted.

As far as I understood Mailpile is a mail user agent, so not comparable. Roundcube runs on a server, Mailpile runs on your own computer.

"You can [then] access it over the network using your web browser" https://www.mailpile.is/faq/#wha-2 seems to challenge your knowledge. I don't know if using it so compromises privacy in unexpected ways, or indeed even works satisfactorily; I am not a user.

It now indeed seems to be the planned path to create a full webmail service out of Mailpile. Though right now the developers still say its "written as a personal application": https://www.mailpile.is/faq/#tec-8

Re: Roundcube Webmail 1.2.0 released with PGP support

#50

Post by DoubleMalt »

gravypod wrote: post #39
benbristow wrote: post #14

Rainloop already has this. http://www.rainloop.net/ Been using it for a year or so now, it's fantastic and has never let me down.

I came here to comment about this. Rainloop is amazing. It also has some extra security features for the end user. For instance, you can tell Rainloop to proxy images from the email and serve them to you instead of your browser getting them from a remote source. It's amazing because you get faster load times and don't leak your desktop IP, only whatever server your running Rainloop on. The only thing it's lacking is…

How is the search in Rainloop?
Post reply on HN