the only e2e I can trust is the one I set it myself.
the only e2e I can trust is the one I set it myself.
use GPG and PGP
10 comments
-
My brain always reads PGP and GPG as "Pretty Good Protection and Gretty Pood Grotection"
-
What’s it actually supposed to be?
-
PGP - Pretty Good Privacy, although when most people talk about "PGP", they really mean the standard, OpenPGP.
GPG - GNU Privacy Guard, an implementation of OpenPGP by the GNU Project.
-
PGP Pretty Good Privacy and GPG GNU Privacy Guard iirc
-
-
-
Says they don't trust 3rd party e2ee, refuse to elaborate further, leaves.
-
It shouldn't be allowed to call it E2E otherwise. If a third party is involved in the communication, it's just a middleman attack that pinky promise to not read your messages.
-
That depends for me. Is it open source? If so, check the source code, you can see for yourself whether that third party is doing anything shady? Anything closed source like WhatsApp, however, and I 100% agree with you.
-
The first time I saw the message "Your messages are now encrypted" on WhatsApp my reaction was "Yes, but it's worthless if you keep a copy of the key".
If the end user isn't able to create the key by themselves, it's most likely useless.
Imagine you rent a flat and the owner is Facebook, who keeps a copy of the key and let everyone in who pays some money.
-
10 comments