Notices tagged with pgp

@RLetot

>>> I've always thought that #pgp was pretty good, but…
>> (I'm slightly disappointed that, of all the many replies I got to the above toot, *none* of
them were "I see what you did there")
> Hmm, would you care to enlighten us?

(PGP stands for Pretty Good Privacy, and I was saying it was "pretty good". It wasn't all that funny to begin with, and much less so now that it's explained!)

> I've always thought that #pgp was pretty good, but…

(I'm slightly disappointed that, of all the many replies I got to the above toot, *none* of them were "I see what you did there")

I've always thought that #pgp was pretty good, but I just came across this seemingly reasonable article that is *very* critical of it: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

The tldr:

* pgp has weak security options and code complexity for backwards compatibility with the 90s

* because of that, pgp is really easy to misconfigue with poor security

* pgp doesn't provide forward secrecy

* pgp encourages you to have one master key that you never change, instead of rotating

Any thoughts/rebuttals?

Looks like I'm using the right email clients, via https://soc.freedombone.net/notice/478284

https://mastodon.social/media/S7YNEi9NWKa7DPY7j2M

#efail #pgp #gnupg #gpg

Das Ende von De-Mail könnte die Forderung nach "einfachen und sicheren Lösungen für die elektronische Identifizierung und Ende-zu- Ende-Verschlüsselung" einleuten. Es soll auf verbreitete Standards wie PGP oder S/MIME umgesattelt werden, so die"AG Digital"... Das ist momentan aber auch das einzig positive. https://netzpolitik.org/2018/erster-ueberblick-koalitions-zwischenstand-zu-digitalem/ #groko #pgp #gnupg