[Crypto-chi] Follow up on March 14 crypto meeting at PS1

[joe fuentes]

Hello everybody!
Following up the great talk and hands on session that Brian and Eviljoel gave a few weeks ago on how to secure email using Thunderbird I'd like to add some tidbits of my own.   Whilst using plug ins like enigmail for Thunderbird is great and everything , we need to be cognizant that quite often we are using webmail of one sort or another.  Especially for those of on our mobile devices.  I for one whilst I have Thunderbird on my desktop and laptops I rarely use it. Or any other email client for that matter.  So the question then is how do we secure our email communication if it's webmail? Wot kind of crypto can I use? Fortunately there are various bowser extensions that facilitate this.  For  gpg we can count on the following...
Mymail-Crypt for Gmailhttps://chrome.google.com/webstore/detail/mymail-crypt-for-gmail/jcaobjhdnlpmopmjhijplpjhlplfkhba?hl=en-US
WebPG - bringing GNU-PGP to FF and Chromehttps://webpg.org
Mailvelope - OpenPGP encryption for webmail. FF and Chrome.https://www.mailvelope.com
Google has yet to release its own Chrome plug in which...here let it speak for itself "End-To-End is a Chrome extension that helps you encrypt, decrypt, digital sign, and verify signed messages within the browser using OpenPGP.   ". From its Github page. It's alpha  not yet ready for prime time though it's been announced since Jan 2014. I don't know wot's taking them so long.  If you feel adventurous try alpha.
Even Windows has support for GPG through VisualGPF. URL is http://notepad.patheticcockroach.com/2351/visualgpg-a-simple-gui-for-gnupg/
In fact, Google Code provided a Windows   app  that does key management stuff  like sign, decrypt and key maintenance.  It's GUI based so you don't have to use the CLI to perform these tasks. Good if you don't like command line like me. Called Cryptophane though I'm not sure how long it's been maintained.  https://code.google.com/p/cryptophane/
And whilst we're at it, even MS Outlook has its own  GnuPG plugin.  Though there are some grumblings about Outlook being closed source, I think this can overcome that objection. More at https://www.openhub.net/p/gpgol
Sorry MAC users I'm not sure if there's equivalent protection on that platform, for Apple Mail or Safari. 
Finally, let's not forget our smartphones. Chatsecure, Textsecure, Redphone,  Find these on Google Play and Apple App store. 
 Anyone have experience with any of the above?  If so please share. 
Hope this helps!
Joe  		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://groups.sshchicago.org/pipermail/cryptoparty-chi/attachments/20150328/27907bb1/attachment.html>