[Gpg4win-users-en] Other crypto-solutions (Re: GpgOL - Automatic Key Discovery)

[Bernhard Reiter]

Hi Me,

Am Donnerstag 22 November 2018 08:35:22 schrieb David Kronlid:
> There's this project aiming to make it easier for beginners to use gpg:
> https://www.pep.security/

German Heise Verlag's ct tested this (in German) last October
and was disappointed ("enttäuscht") 
https://www.heise.de/ct/ausgabe/2018-22-Mail-Verschluesselung-Pretty-Easy-Privacy-Interessant-aber-mit-Schwaechen-in-der-Umsetzung-4183762.html
(The security problem they found with pep in Enigmail was fixed within a few 
days later,  
https://www.heise.de/security/meldung/pEp-Foundation-hat-Sicherheitsluecke-in-Enigmail-pEp-geschlossen-4191426.html)

> As most people these days read emails on their phones, 

you can do OpenPGP/MIME with K9-Mail on Android 
or for example Canary Mail for iOS (proprietary).

> it's also possible 
> to switch to chat app based encryption instead of gpg:
> https://signal.org/

You'd lose the security properties of decentralisation,
stable/understood business model and choice of legal space
with Signal.

> Or:
> https://wickr.com/

Additionally loses the security properties of an open specification
and existing Free Software implementations.

Alternative to mail, while not losing these security properties would
be Matrix (a bit less mature than mail) and XMPP (a bit lacking on user 
experience because it is hard to chose and configure servers and clients).

Best Regards,
Bernhard

-- 
www.intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-users-en/attachments/20181122/45c22a94/attachment.asc>