[Crypto-chi] openPGP encryption for webmail - browser extension

[eviljoel]

Hey All,

While I agree that Mailvelope is better than nothing, there are
definitely some problems with it. Mailvelope cannot sign encrypted
messages. It can sign messages, it can encrypt messages, but it cannot
do both at the same time.

Key importing on Mailvelope is also not very end user friendly. You have
to copy an paste the base 64 text from a key server yourself.

Finally, I'm a bit weary about how Mailevlope is dependent upon
modifying the DOM to start editor pop-ups. A malicious page might be
able to trick a Mailvelope user into entering information into an
insecure window.

For right now, I still think Thunderbird provides the best (free) PGP
user experience. (However, Mailpile looks promising. I just haven't
tried it yet.)

Thanks,
eviljoel


On 12/10/2014 12:28 AM, joe fuentes wrote:
> After the Snowden files revealed somebody's watching you, this extension
> might be a good antidote.  Mailvelope is a FF/Chrome/Chromium that puts
> OpenPGP in everyone's hands.
> 
> Take a look:
> 
> http://www.mailvelope.com
> 
> -Joe
> 
> 
> _______________________________________________
> cryptoparty-chi mailing list
> cryptoparty-chi at groups.sshchicago.org
> http://groups.sshchicago.org/listinfo/cryptoparty-chi
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://groups.sshchicago.org/pipermail/cryptoparty-chi/attachments/20141213/e7466269/attachment.sig>