GPG-Tui, a Terminal User Interface for GnuPG

Post by AlbinoDrought » Sun, May 30, 2021, 5:12 AM UTC

reifyx wrote: post #26

tptacek wrote: post #9

Earlier quoted context omitted.

The best-known problem with PGP is its poor usability, but that's not its biggest problem. It's biggest problem is an archaic design that literally predates much of modern cryptography; most egregiously, PGP is almost never forward-secret, and almost always relies on long-term keys, which is a deadly combination. A more fundamental design issue is simply that cryptography engineers long ago abandoned the idea of a si…

I don't think people want forward secrecy for their email. If they get a new computer, they probably want all their mail on there, right? Isn't porting over their email efficiently at odds with forward secrecy? Also, is forward secrecy compatible with any kind of encrypted search (I know most encrypted search schemes leak too much these days, but if the alternative is not encrypting email at all...)? Also, how would…

Post by R0b0t1 » Sun, May 30, 2021, 5:19 AM UTC

njt wrote: post #29

R0b0t1 wrote: post #12

Earlier quoted context omitted.

I am aware of these arguments. Still, GPG exists, and no one has really proposed good solutions, or at least the solutions that have been proposed are not taking off for some reason . It is true that pointing out a problem does not need to be accompanied by a solution to be valid, but at this point, if you're going to complain please work towards solving the issue. It is too easy in this case to come off as someone w…

> GPG exists, and no one has really proposed good solutions [...] > if you're going to complain please work towards solving the issue Perhaps because you are asking the wrong question: "PGP/GPG is old, broken, and insecure, what is an exact drop-in replacement that I can substitute for it?" Instead, the question should be: "PGP/GPG is old, broken, and insecure, what is a replacement for [this specific thing I am tryi…

Post by alwillis » Sun, May 30, 2021, 5:52 AM UTC

Post by cpach » Sun, May 30, 2021, 5:55 AM UTC

user3939382 wrote: post #34

kingo55 wrote: post #2

The poor UX behind gpg dissuaded me (and likely many others) from using it. Love the tree layout that's used here... time to get back into gpg.

I get requests from non-technical people in my life for how they can email sensitive files (to other non-technical users) in a way that is especially secure. My refrain: “Technically there is, but… (contemplates PGP for half a second)… it’s very complicated to setup.” Between email phishing attacks, Dropbox and everyone else on HIBP, I honestly don’t know what advice to give non-technical users besides put it on a US…

Post by KirillPanov » Sun, May 30, 2021, 6:13 AM UTC

sneak wrote: post #22

JasonFruit wrote: post #7

Earlier quoted context omitted.

I really don't get this attitude, though I think it must be valid, since I seem to be almost alone in disagreement. I use plain old GPG for a lot of purposes, and I don't find its command-line usage difficult at all. Key management, encryption, decryption, signing — all of these operations are pretty straightforward. What specific tasks have you found difficult?

It's very hard to simply encrypt a file to a given pubkey (due to the key trust model) compared to, for example, something like age (where it's just `age -r $PUBKEY`). You also have to set GNUPGHOME somewhere and import the key first, you can't easily do it statelessly without tracking mud into the filesystem first.