[dead]
Felony – An open-source PGP keychain
231–240 of 241 posts
Re: Felony – An open-source PGP keychain
#232I'm not sure this is the name to use if you want people of only average political commitment to use your app. Although at least it's a striking name.
Thanks! We found it randomly by searching available .io domain names.
Don't forget to send offset money to Chagos for the social injustice in the IO domain names.
https://gigaom.com/2014/06/30/the-dark-side-of-io-how-the-u-...
Re: Felony – An open-source PGP keychain
#233Really great app. I was alway in search for open-source tool as this. Didn't get time to check yet. But have to soon.
Re: Felony – An open-source PGP keychain
#234Hi I'm Henry, the creator of Felony I’ve had a passion for politics, history, and programming since the age of 12 growing up in a suburb of Chicago. During my freshman year, I developed an interest in software. A couple of apps and hackathons (programming competitions) later, I was working on my own startups when I made the leap to drop out of high school to become a software engineer at a venture-backed tech startup…
This looks like an interesting project but has a poor name choice. If it's targeted at non technical users, it may actually prevent them from using it, out of fear that just using it is illegal.
I think in era of state being the public enemy names like this has a political purpose. :)
Re: Felony – An open-source PGP keychain
#235Earlier quoted context omitted.
Have you heard of or used signal? https://whispersystems.org/ Same idea -- strong crypto that's usable for anyone. It uses the OTR Ratchet protocol which uses perfect forward secrecy. The app also provides a way to verify keys through an OOB channel. I would recommend considering OTR Ratchet integration just like WhatsApp did recently. PGP is not a good design choice for a messaging app as you're always using asymmet…
PGP is a great choice when you want to be able to send encrypted messages over any channel you want. It sounds like you do not understand how PGP works -- you exchange public keys over a trusted medium and then use public key cryptography to encrypt the AES key used to encrypt the rest of the message. The OpenPGP library it uses has been audited (twice). Most of the mistakes that could have be made are avoided this w…
>you exchange public keys over a trusted medium and then use public key cryptography to encrypt the AES key used to encrypt the rest of the message.
What do you consider a "trusted medium?"
Re: Felony – An open-source PGP keychain
#236Would be better to use a small GUI library, avoiding Webkit / Chromium, for memory usage and security.
Re: Felony – An open-source PGP keychain
#237Earlier quoted context omitted.
If you don't need PFS (which you should need) then you can use DH to create the shared key you use for the HMAC. Maybe you could even do an original OTR-like ratchet scheme (only change the key once the recipient shows that they are using the new key) to get PFS. But in principle if you assume that key distribution is "solved" then you can implement the unique parts of OTR.
I'm not sure, you're saying the format and message standards of PGP of providing machine-readable signed keys aren't worth anything, because you can just memorize some base64 coded secrets and run with it? That's how you'd prefer to bootstrap secure communication with a journalist, or for recruiting people to demonstrate against the current regime in Egypt? > But in principle if you assume that key distribution is "s…
My point was that if PGP was suitable for "usable" encryption (which is the whole point of this program), then you could use the same key distribution methods but use Axolotl.
Re: Felony – An open-source PGP keychain
#238Attackable via dependencies
Re: Felony – An open-source PGP keychain
#239Earlier quoted context omitted.
This looks like an interesting project but has a poor name choice. If it's targeted at non technical users, it may actually prevent them from using it, out of fear that just using it is illegal.
I think in era of state being the public enemy names like this has a political purpose. :)
Then call it "Rightstarter" :)
Re: Felony – An open-source PGP keychain
#240Earlier quoted context omitted.
This looks like an interesting project but has a poor name choice. If it's targeted at non technical users, it may actually prevent them from using it, out of fear that just using it is illegal.
How about "The Fourth"? The name denotes privacy and won't scare off people by sounding illegal.
I'm sorry but as a non-US person it's been made very clear to me that I have zero rights, zero laws to depend on and zero expectations of privacy. Calling it "the fourth" is like rubbing that in my face, leaving a rather bad taste.