Conversation

Notices

1. Embed this notice
   Lance R. Vick (lrvick@mastodon.social)'s status on Saturday, 16-Nov-2024 19:29:27 JST Lance R. Vick

   Saying "Don't use PGP, use SigStore or Age!" is the same class of dumb as saying "Don't use web standards, use Flash or Java embeds!".

   Before advocating everyone abandon standards and use whatever tools have the better UX or defaults for your use case blindly, maybe take the time to actually understand the problems the standards are trying to solve for, and if any improvements or better implementations are in progress.

   • Embed this notice
     Delta Chat (delta@chaos.social)'s status on Saturday, 16-Nov-2024 19:29:25 JST Delta Chat

     in reply to

     • Océane

     @oceane @lrvick oh, we are very much working with and for people in heavily repressive situations and they often use #deltachat when signal, threema, WhatsApp don't work .... And even if they do. Why? Because our apps provide instant onboarding without phone numbers, multi-profile and multi-device support and a pretty secure audited and analysed key management protocol without key servers. Plus support for state of the art circumvention proxying. There is a whole lot more than PFS to consider.

   • Embed this notice
     Océane (oceane@peculiar.florist)'s status on Saturday, 16-Nov-2024 19:29:26 JST Océane

     in reply to

     • Delta Chat

     @lrvick
     
     1. You're commenting a blog post. People can sit back and interpret it as a 2024 state of the art of the current cryptographic infrastructure, so to say, to find out what's incomplete and where we should put more effort, e.g., what's preventing @delta from switching to a more modern cryptographic standard.
     
     2. Be mindful of the use cases for which you're putting minorities at risk. This blog post was written by a cryptography engineer who knows how bug-prone implementing OpenPGP is. IMHO, a group chat using 5 different OpenPGP implementations on Yahoo mail servers shouldn't be treated as zero-access. Delta Chat may be a good WhatsApp replacement for family groups but advocating for this kind of decentralization against State-level threat models is plainly dangerous.
     
     Having a sociology graduate explain this to you means that at least one of these two posts is incredibly bad.

     j@mastodon repeated this.