[cp-global] instant PGP contactform

p + ppcrypto at yandex.com
Wed Jan 1 09:10:29 GMT 2014


Nivatius:
> I stumbeled upon this service:
> https://encrypt.to/
> 
> you can use it to make a pgp contactform
> eg:
> https://encrypt.to/nivatius@gmail.com
> for my adress.
> 
> it uses openpgp.js , meaning JavaScript for client side encrypting the
> messages.
> the sourcode is open.
> 
> what do you think about it?

Very interesting, and a cursory glance seems to indicate that it works
as advertised. It might be a step towards simple end-to-end encryption
for the masses.

I wonder how we can ensure that the site can be trusted, and not change
the way in which it works to intercept the message a la Hushmail:
https://en.wikipedia.org/wiki/Hushmail#Compromises_to_email_privacy

There would appear to be no issue with the passphrase, but possibly with
the intercepting of cleartext.


More information about the global mailing list