That’s hopefully gonna get better if they use WKD or Autocrypt youĭon’t even have to bring it up. Implementation (like GnuPG) and try to walk them through it. It used to be suuuper awkward to ask someone to use a PGP You don’t send nuclear secrets over paper mail.īut you don’t advertise your own grocery list, either. Unpeeped at, but then if someone breaks into your house you’re It should be something that arrives to you safely and Over here, of course.) But that’s not what email is. (For people who have better memory than miss Forgetful Systems that are set up to not do that, to haveĮverything be fleeting, messages autodeleting, ephemeral, can be a Hoard old mail so they can search it, reference it, think about it, One of the reasons why it’s so bad, by the way, is that people love to There is important stuff going over email still. Operators, it’s even more likely that an op will get a chance to sneakĪgain, knowing that email security sucks (for example, there’s noįorward security, and there’s too much on-by-default backwardĬompatibility with old crusty cyphers and keysizes), it’s still a good And on the smaller more indie (and less traffic) This might sound tinfoil,īut it’s a fact that Gmail has bots that read your email and uses that PGP’s only remaining purpose, then, aside from being a redundancy inĬase the other encryption gets wrecked, is to protect you from your Have TSL encryption between client and server and between server and These days, we have DKIM to fight against tampering and spoofing (thisĪlso helps against “efail” type attacks, and against mitm), and we Released in 1991 when an email was less secure than a postcard.Įveryone could read everything, and spoof as anyone. Remember, PGP preceded SSL and TLS (and with them HTTPS). Of course we wantĪ couple of really good things have happened since the era of PGP. Is someone saying “I’ve got locks on my house so I don’t need to wear Super supreme secure cipher app, that’s what people should use forĬommunication, and email shall be insecure”, I’m like… what I hear It’s just that if you’ve heard the cool kids say “I have such-and-such Work better, please keep up the good work. Don’t get me wrong if you’re in a position to make email encryption

Autocrypt paper