Live data from Hacker News

Towards Sequoia OpenPGP v1.0

sequoia-pgp.org

1–10 of 62 posts

Re: Towards Sequoia OpenPGP v1.0

#5
post #3

IMO, encrypted e-mail is a dead end. Latacora has a good blog post about it that I highly recommend: https://latacora.micro.blog/2020/02/19/stop-using-encrypted....

That post should really be called, "Stop using email". Which is fine when you don't need something like email. But sometimes you do.

Re: Towards Sequoia OpenPGP v1.0

#6
post #3

IMO, encrypted e-mail is a dead end. Latacora has a good blog post about it that I highly recommend: https://latacora.micro.blog/2020/02/19/stop-using-encrypted....

Hmm, I don't really see any really convincing points, or workable alternatives that your linked article provides.

Nevertheless I would like to read more about this claim:

> It [PGP] was designed in the 1990s, and in the 20 years since it became popular, cryptography has advanced in ways that PGP has not kept up with. So, for example, it recently turned out to be possible for eavesdroppers to decrypt messages without a key, simply by tampering with encrypted messages. Most technologists who work with PGP don’t understand it at a low enough level to see what’s wrong with it.

(I admit I am one of these technologists)

Re: Towards Sequoia OpenPGP v1.0

#7
post #3

IMO, encrypted e-mail is a dead end. Latacora has a good blog post about it that I highly recommend: https://latacora.micro.blog/2020/02/19/stop-using-encrypted....

Whenever someone criticizes email encryption they fail to provide an actual replacement. Encrypted instant messaging is an alternative, but it's not a replacement.

Re: Towards Sequoia OpenPGP v1.0

#8
Having an alternative implementation to GnuPG is a pretty important. Although many would argue against the use of PGP encryption for many use cases such as email, there are other use cases where PGP's ideas have no replacement.

For a specific example take signing git commits. Even fossil scm delegates this task to pgp. Personally keybase is the only project that may provide some form of alternative, but they do so by supporting pgp.

I definitely agree that PGP was and is no longer the correct tool for every use case as it sort out to be, but I find there are still pockets where PGP has no alternative. I'd be interested what HN's thoughts are on PGP for this specific use case and if there could be an alternative.

Re: Towards Sequoia OpenPGP v1.0

#10
post #9
post #3

IMO, encrypted e-mail is a dead end. Latacora has a good blog post about it that I highly recommend: https://latacora.micro.blog/2020/02/19/stop-using-encrypted....

PGP is used for more than just email

The writer of the article wrote another one that is linked where he criticises other uses of PGP[0].

[0]: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

Post reply on HN