I don’t understand why it took us 50 years to figure out how to do encrypted messaging-over-email. Anyone wanna swap email addresses?
I don’t understand why it took us 50 years to figure out how to do encrypted messaging-over-email. Anyone wanna swap email addresses?
who do you KNOW doesn’t suck? myself, i like disroot, but i still prefer to encrypt any comms that go across their services, because i can’t explicitly trust them. i don’t even (really) trust riseup.net. it’s always best to encrypt anything thats sensitive yourself and control the keys.
There’s still a big metadata problem with email in general, and if you are using services tied to activism, situations like the one that happened to Mastodon could just as easily happen to you.
The trouble with email is baked into email itself, versus private messaging apps that use a protocol that was designed for the express purpose of chats that don’t require one or more servers to retain them…
i think it’s worth pointing out that pgp-protected messages would still be secure in the case of the kolektiva breach, not that anyone is e2ee for mastodon messages.
if you (and your friends) control your (and their) keys, then the actual contents of your communications can’t be compromised. i think email is fine if you understand the limitations.
The metadata itself is pretty valuable. In this case, the metadata exposes who, where, when, and how often the conversations take place. And that metadata is valuable.
Generally speaking, it is inadvisable for privacy to keep data (even in an encrypted form) on a server post delivery.