Live data from Hacker News

Modern Alternatives to PGP

blog.gtank.cc

11–20 of 261 posts

Re: Modern Alternatives to PGP

#11
post #7

Earlier quoted context omitted.

For the userland, there was only two tools on the post that allows signing. How will handle file encryption?

The article does mention saltpack, discussion about it here: https://news.ycombinator.com/item?id=14067003

This looks nice and it supports multiple recipients which was the first question that popped into my head.

Re: Modern Alternatives to PGP

#12
post #8

Earlier quoted context omitted.

The only encrypted mail I get is from Facebook. It drives me crazy that nobody else bothers to put a "enter your public key here" field. It seems like it should be super easy to implement, but Facebook is literally the only company that I've ever seen do it.

Could you elaborate? I don't use Facebook.

In Facebook's settings you can paste a PGP public key. Notification emails sent to you by Facebook will then be encrypted using that key.

Re: Modern Alternatives to PGP

#13
post #12

Earlier quoted context omitted.

Could you elaborate? I don't use Facebook.

In Facebook's settings you can paste a PGP public key. Notification emails sent to you by Facebook will then be encrypted using that key.

Interesting! Thanks for the explanation.

Re: Modern Alternatives to PGP

#15
post #8
post #6

> No one was sending you encrypted emails anyway,... Ouch, the unfortunate truth.

The only encrypted mail I get is from Facebook. It drives me crazy that nobody else bothers to put a "enter your public key here" field. It seems like it should be super easy to implement, but Facebook is literally the only company that I've ever seen do it.

How many people in the industry you know (besides Tech), who use an e-mail client that is neither OS X's Mail or a web mail client?

Re: Modern Alternatives to PGP

#16
post #10

As far as I can tell none of these "alternatives" implement what is at least for me the most interesting feature of PGP: web of trust and key servers. It would be really nice to see a modern take on this. > No one was sending you encrypted emails anyway I actually use PGP for e-mailing quite often, for instance: how am I supposed to report security issues without gpg? (please don't suggest Whatsapp...)

Anyone suggesting anything owned by Facebook as an alternative to Pretty Good Privacy should be ignored.

Re: Modern Alternatives to PGP

#17
post #8

Earlier quoted context omitted.

The only encrypted mail I get is from Facebook. It drives me crazy that nobody else bothers to put a "enter your public key here" field. It seems like it should be super easy to implement, but Facebook is literally the only company that I've ever seen do it.

Could you elaborate? I don't use Facebook.

Facebook has a field in your profile settings that you can upload your public key. The purpose is to encrypt the email notifications they send to you.

Re: Modern Alternatives to PGP

#18
post #2

The context for this is this Go project proposal: https://github.com/golang/go/issues/30141 Filippo proposes to deprecate (but not remove) Blowfish, archaic curves, CAST, MD4, RIPEMD160, TEA, Twofish, XTS, and OpenPGP from the Golang x/ libraries (which are "officially supported" but not part of the standard library. It's really heartening to see a project get serious about shedding legacy crypto.

All of you are using pgp wrong, emails are a crap way to use it. It's not your fault, it was meant to be used that way. There's a better way to use it though.

Re: Modern Alternatives to PGP

#19
post #10

As far as I can tell none of these "alternatives" implement what is at least for me the most interesting feature of PGP: web of trust and key servers. It would be really nice to see a modern take on this. > No one was sending you encrypted emails anyway I actually use PGP for e-mailing quite often, for instance: how am I supposed to report security issues without gpg? (please don't suggest Whatsapp...)

Keybase is one version of a modern take on Web of Trust. https://keybase.io/

Re: Modern Alternatives to PGP

#20
post #8

Earlier quoted context omitted.

The only encrypted mail I get is from Facebook. It drives me crazy that nobody else bothers to put a "enter your public key here" field. It seems like it should be super easy to implement, but Facebook is literally the only company that I've ever seen do it.

How many people in the industry you know (besides Tech), who use an e-mail client that is neither OS X's Mail or a web mail client?

Most "non-tech" people I know use Outlook.
Post reply on HN