[HN Gopher] Yes, We Want Cryptographic Protection for Email
       ___________________________________________________________________
        
       Yes, We Want Cryptographic Protection for Email
        
       Author : nwalfield
       Score  : 20 points
       Date   : 2021-06-29 16:31 UTC (6 hours ago)
        
 (HTM) web link (sequoia-pgp.org)
 (TXT) w3m dump (sequoia-pgp.org)
        
       | aborsy wrote:
       | Thank you for this well written informative article!
       | 
       | I have a few of questions.
       | 
       | 1. There was work in progress to update the OpenPGP protocol, eg,
       | RFC 4880bis. What's the status of this draft? When can users
       | expect AEAD from OpenPGP?
       | 
       | Some of the criticisms of PGP are lack of modern authentication,
       | lack of forward secrecy, and limited usability.
       | 
       | FS is probably not relevant to email that involves long-term
       | storage. UX is out of scope of protocol. AEAD however is expected
       | these days. MDC isn't modern authentication.
       | 
       | 2. Is PGP currently effective against powerful adversaries?
       | 
       | 3. What do you think of claims that sequoia is an interesting
       | project in a doomed echo system?
        
       ___________________________________________________________________
       (page generated 2021-06-29 23:02 UTC)