{"action":"created","issue":{"url":"https://api.github.com/repos/nylira/prism-break/issues/1925","repository_url":"https://api.github.com/repos/nylira/prism-break","labels_url":"https://api.github.com/repos/nylira/prism-break/issues/1925/labels{/name}","comments_url":"https://api.github.com/repos/nylira/prism-break/issues/1925/comments","events_url":"https://api.github.com/repos/nylira/prism-break/issues/1925/events","html_url":"https://github.com/nylira/prism-break/issues/1925","id":304977540,"number":1925,"title":"Remove GPG/PGP for email","user":{"login":"strugee","id":911174,"avatar_url":"https://avatars0.githubusercontent.com/u/911174?v=4","gravatar_id":"","url":"https://api.github.com/users/strugee","html_url":"https://github.com/strugee","followers_url":"https://api.github.com/users/strugee/followers","following_url":"https://api.github.com/users/strugee/following{/other_user}","gists_url":"https://api.github.com/users/strugee/gists{/gist_id}","starred_url":"https://api.github.com/users/strugee/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/strugee/subscriptions","organizations_url":"https://api.github.com/users/strugee/orgs","repos_url":"https://api.github.com/users/strugee/repos","events_url":"https://api.github.com/users/strugee/events{/privacy}","received_events_url":"https://api.github.com/users/strugee/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":42,"created_at":"2018-03-14T00:01:18Z","updated_at":"2018-04-07T19:39:58Z","closed_at":null,"author_association":"COLLABORATOR","body":"I would like us to consider removing all references to PGP and GPG, because it's my belief that if it weren't so famous and longstanding, we would reject it from the list today. For further clarification, I am talking about PGP in the context of email.\r\n\r\nMaterials on PGP's suckiness abound, but here's an incomplete list just off the top of my head (in rough order of how terrible they are):\r\n\r\n1. PGP leaks metadata like a champion, including the subject line and recipients\r\n2. Outdated crypto, no forward secrecy, big keys\r\n3. Fingerprint verification is really hard to explain\r\n4. Super easy to fuck up _basic_ UX stuff, like e.g. not encrypting to yourself so you can't read your sent mail\r\n5. Most if not all PGP UIs are terrible, it's really easy to accidentally turn off encryption\r\n6. Revocation isn't reliable\r\n7. Even if you do set up refreshes to get revocation you leak your entire social graph to the keyserver, and often keyservers literally speak plaintext so you can sniff this stuff completely passively (unless you use parcimonie but that doesn't come set up by default, _anywhere_ AFAIK, and no one knows about it so it's worthless)\r\n8. There's no real multi-device experience, particularly for your own trust decisions\r\n9. Trust in the Web of Trust is completely broken because you have no idea what security steps _other_ people take, which is a big problem because you're relying on other people's signatures (and therefore security) to compute trust paths; see also https://lists.torproject.org/pipermail/tor-talk/2013-September/030235.html\r\n\r\nI could go on and on but I'll stop there. https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/ goes into a lot of these points too.\r\n\r\nThere are better alternatives. I have [tried to teach PGP](https://strugee.net/cryptoparty-seattle/) in the real world and both times it has gone exceedingly poorly to the point where I abandoned it entirely and taught Signal instead. Keysigning parties are a joke; they're _somewhat_ useful in very small contexts/communities like Debian but not at scale.\r\n\r\nI will also point out that a lot of these problems can be fixed. But by the time you fix them, you'll end up with a brand-new backwards-incompatible protocol that basically reimplements Signal, only poorly. And some cannot be fixed at all really, like the metadata problem."},"comment":{"url":"https://api.github.com/repos/nylira/prism-break/issues/comments/379494106","html_url":"https://github.com/nylira/prism-break/issues/1925#issuecomment-379494106","issue_url":"https://api.github.com/repos/nylira/prism-break/issues/1925","id":379494106,"user":{"login":"yegortimoshenko","id":1643293,"avatar_url":"https://avatars2.githubusercontent.com/u/1643293?v=4","gravatar_id":"","url":"https://api.github.com/users/yegortimoshenko","html_url":"https://github.com/yegortimoshenko","followers_url":"https://api.github.com/users/yegortimoshenko/followers","following_url":"https://api.github.com/users/yegortimoshenko/following{/other_user}","gists_url":"https://api.github.com/users/yegortimoshenko/gists{/gist_id}","starred_url":"https://api.github.com/users/yegortimoshenko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yegortimoshenko/subscriptions","organizations_url":"https://api.github.com/users/yegortimoshenko/orgs","repos_url":"https://api.github.com/users/yegortimoshenko/repos","events_url":"https://api.github.com/users/yegortimoshenko/events{/privacy}","received_events_url":"https://api.github.com/users/yegortimoshenko/received_events","type":"User","site_admin":false},"created_at":"2018-04-07T19:39:58Z","updated_at":"2018-04-07T19:39:58Z","author_association":"COLLABORATOR","body":"Here is a good write-up on that topic by Mailpile developer, which I wholeheartedly agree with: https://www.mailpile.is/blog/2016-12-13_Too_Cool_for_PGP.html"}}
{"actor":{"display_login":"yegortimoshenko"}}