Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

21 years after the request OpenPGP support gets added to Thunderbird

bugzilla.mozilla.org

Post reply on HN
Print view View original

221–230 of 281 posts

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#221

Post by upofadown »

XMPPwocky wrote: post #101
rendx wrote: post #83

Earlier quoted context omitted.

Agreed. It has been long overdue that alternative OpenPGP implementations exist that try to address some of the peculiarities of GnuPG -- most of which are [still] there because its founder wants to preserve compatibility at all costs to support some of its long-term institutional users. And, yes, dealing with these peculiarities should not the responsibility of end users, but of further abstraction layers built on t…

What is a good non-email use case for the PGP format?

It is used routinely on the dark nets by pasting encrypted messages into web forms.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#222

Post by upofadown »

owenmarshall wrote: post #104
rendx wrote: post #86

Earlier quoted context omitted.

Because packet formats are bad? I don't understand what you're trying to say here.

Flexibility in cryptography is often very bad and opens doors to downgrade attacks or things like JWT’s alg:none issues. https://www.imperialviolet.org/2016/05/16/agility.html “Have one joint, and keep it well oiled.”

The linked article is all about protecting data in flight like in the TLS case. PGP is all about protecting data at rest. The two applications are fundamentally different.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#223

Post by uhtred »

skyfaller wrote: post #50

I used to love PGP, but I now think encrypted email is a bad idea. https://latacora.micro.blog/2020/02/19/stop-using-encrypted.... Better to use a protocol designed with encryption in mind, like Signal, to get forward secrecy, avoid leaking metadata, and have encryption always on by default. UPDATE: I have been reminded that PGP does not have to be used with email. I meant to say that I used to love using PGP with em…

I don't know much about Signal, but who manages your private key? Who does the encrypting?

With PGP there is zero chance of anyone decrypting my data unless they have my key and password, which isn't uploaded anywhere and no apps have access to it.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#224

Post by acdha »

epistasis wrote: post #144
acdha wrote: post #39

Earlier quoted context omitted.

Enterprises, at least in the form of the U.S. federal government, have but there are two key drawbacks: 1. At least until recent, Microsoft implemented it as blocking code in the UI thread – open a message and Outlook won't paint until it can verify the cert, access your local key store (hope your token is in a USB port which is 100% reliable), etc. If you thought “Does that mean that revocation checks block the UI u…

> blocking code in the UI thread – open a message and Outlook won't paint until it can verify the cert Yikes. I should probably be surprised, but I guess I'm not. This sort of thing goes a long ways towards explaining all sorts of other oddities or using Outlook.

Outlook is _old_ and predates threading being a mature OS primitive. I remember reporting bugs of this class against Office 97.

They seem to be extremely hesitant to change it, which I assume is due to the corporate plugin ecosystem.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#225

Post by jcranmer »

jychang wrote: post #208
kelnos wrote: post #196

Earlier quoted context omitted.

It's a joke. The text of the 2nd amendment is slightly ambiguous. Many people (myself included) believe that the intent of it was to protect citizens' right to arm themselves, but only in the context of being a member of a state-run/regulated militia. Unfortunately SCOTUS has continually widened the scope of 2A over the years. > as a non-American who's flooded with videos of random Americans walking around supermarke…

> the intent of it was to protect citizens' right to arm themselves Unlike european countries, the american frontier was a dangerous place where every household needed a gun. Armed citizens existed regardless whether there was a militia or not.

Except it was also seen as a civic duty for able-bodied men to join the militia. If we're talking late 18th century, the Venn diagram of gun ownership and militia membership has a very large degree of overlap.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#226

Post by zeveb »

implements wrote: post #171
highmastdon wrote: post #162

Earlier quoted context omitted.

Side note: don’t call the countries in the European Union “states”. They’re sovereign countries that have committed themselves through treaties to the Union, not a US like government body

Country means “sovereign state” - no-one’s suggesting EU member states aren’t sovereign nations in the sense US states aren’t.

U.S. states are sovereign states, just like EU states are. They United States government itself is also sovereign, in a sense that the EU government itself may or may not be. (Most) Americans live under two sovereigns: their state and the U.S.

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#227

Post by texanstereot »

kelnos wrote: post #196
skrebbel wrote: post #155

Earlier quoted context omitted.

I see your point, but as a non-American who's flooded with videos of random Americans walking around supermarkets carrying semiautomatic rifles, I'm not sure what you mean with "tightly regulated militia".

It's a joke. The text of the 2nd amendment is slightly ambiguous. Many people (myself included) believe that the intent of it was to protect citizens' right to arm themselves, but only in the context of being a member of a state-run/regulated militia. Unfortunately SCOTUS has continually widened the scope of 2A over the years. > as a non-American who's flooded with videos of random Americans walking around supermarke…

Texas isn't like that either. I've lived in Texas for almost a decade and I've never seen someone open carrying a long rifle at the supermarket.

Geez, the stereotypes people spread!

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#228

Post by jacobush »

zeveb wrote: post #226
implements wrote: post #171

Earlier quoted context omitted.

Country means “sovereign state” - no-one’s suggesting EU member states aren’t sovereign nations in the sense US states aren’t.

U.S. states are sovereign states, just like EU states are. They United States government itself is also sovereign, in a sense that the EU government itself may or may not be. (Most) Americans live under two sovereigns: their state and the U.S.

Maybe so, but then we need to come up with more words. As the UK proved, a nation in the EU is free to leave the EU, but a state in the US is not. (Without consent of the US, of course.)

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#229

Post by elric »

globular-toast wrote: post #172

Thunderbird has the only calendar I know that has a "multiweek" display as opposed to (well, in addition to) the utterly retarded month view that exists in every other GUI. We've been doing electronic calendars for how long now? Why are we still using a paradigm from paper based calendars? At the beginning of a month I can see three weeks ahead, but at the end of the month I can see three weeks behind. It frustrates…

Multiweek is pretty good. But I wish it had a better "multi day" view. Week view is great, a column per day, with the days neatly split into hour blocks. But my screen is huge. It could fit much more than 7 days with just as much detail. As soon as you switch to Multiweek, all that detail is lost. I guess what I'd like to see is a "Multi day" view, which starts today and displays the next N-days with as much detail as my screen allows (or N configured days).

Re: 21 years after the request OpenPGP support gets added to Thunderbird

#230

Post by NikolaeVarius »

highmastdon wrote: post #162
Longlius wrote: post #74

Earlier quoted context omitted.

Any signatory to the Wassenaar Arrangement, which includes the entirety of North America, Europe (including Russia), Australia, India, and Pacific Asia (minus China) must consider cryptographic technologies to be munitions for the purposes of export. Now, these restrictions have been considerably loosened to the point that the export isn't really controlled, but international law still considers it a munition. The US…

Side note: don’t call the countries in the European Union “states”. They’re sovereign countries that have committed themselves through treaties to the Union, not a US like government body

It's amazing how contrarian HN can get. The EU is literally composed of member states in its formation documents
Post reply on HN