#pgp

7 posts · Last used 3d

Back to Timeline
Lazou @lazou@kanoa.de · 3d ago
Mein PGP-Keygenerator auf dem Weg zu Post-Quantum Ich möchte euch nur kurz informieren, dass Post-Quantum-Kryptografie in PGP nicht mehr allzu weit entfernt ist. Mit RFC 9980 wurde inzwischen der offizielle IETF-Standard für Post-Quantum-Kryptografie in OpenPGP veröffentlicht. ➡️ Verschlüsselung: hybride Verfahren mit ML-KEM + ECC ➡️ Signaturen: hybride Verfahren mit ML-DSA + EdDSA Jetzt fehlt im Wesentlichen noch die entsprechende Umsetzung in OpenPGP.js. Sobald diese Unterstützung dort sauber integriert ist, werde ich auch meinen PGP-Keygenerator um standardkonforme Post-Quantum-OpenPGP-Schlüssel erweitern. :boost_ok: #OpenPGP #PGP #Verschlüsselung #Keygenerator #Datenschutz #Security #Secunis #ITSecurity
1
1
4
🇨🇦Samuel Proulx🇨🇦 @fastfinge@fed.interfree.ca · Jul 29, 2026
Yay! We can now send and receive both OMEMO versions! It only took, like, three days to exchange basic text messages via #xmpp, using an already developed library. On the other hand, we now have a really solid base for...the nine billion other things we need to do. At some point I'm going to want interop testing volunteers who use conversations and gajim, because those clients aren't #accessible so I can't make sure they work. But that'll probably be in a few months. Also, TIL I learned that there's really no good C# library to do #PGP. So I'm not.
0
0
0
River 🏳️‍🌈🏳️‍⚧️ @riverpunk@defcon.social · Jul 29, 2026

If it's possible for a user to send an unencrypted message across the wire on your "end-to-end encrypted" app, then it's not actually E2EE.

  • This means that email can't be E2EE (because a user could easily hit reply without encrypting, accidentally sending the full conversation thread in plaintext).

  • It refers to RCS texting, where, at least on Android, it will often drop down into unencrypted SMS when the RCS protocol is having trouble.

  • It's the case for Matrix even, where E2EE is a setting that can switch on or off.

In no world would we accept an application as being encrypted between client and server if it was possible for packages to get sent in plaintext occasionally. We wouldn't put up with HTPPS occasionally sending HTML forms over HTTP on accident. Why do many people feel comfortable with the same issue when applied between two users, instead of a user and a server?

If it's possible to send a plaintext message in an E2EE platform, then the platform isn't really E2EE.

#encryption #security #privacy #email #pgp

3
0
1
heise online @heiseonline@social.heise.de · Jul 19, 2026
Missing Link: Was ist eigentlich aus Cryptopartys geworden? Cryptopartys waren die Antwort auf die Snowden-Enthüllungen. Doch was ist aus der Bewegung geworden und wie hat sich der Kampf für digitale Freiheit gewandelt? https://www.heise.de/hintergrund/Missing-Link-Was-ist-eigentlich-aus-Cryptopartys-geworden-11366070.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon #Datenschutz #EdwardSnowden #MissingLink #Netzpolitik #OpenSource #PGP #Überwachung #Verschlüsselung #news
1
1
5
Jan Vlug @janvlug@mastodon.social · Jul 09, 2026
RE: https://digitalcourage.social/@echo_pbreyer/116889627679596681 "As a result, mass scanning is now permitted again until 2028." "A symbolic exemption was adopted for encrypted communications" "The fact that Chat Control is moving forward against the will of the majority of voting MEPs is a farce and damages democracy." "Blanket chat control is just as unacceptable as indiscriminately opening everyone’s physical mail." #chatcontrol #pgp #gpg
Quoting
Patrick Breyer @echo_pbreyer@digitalcourage.social
🇪🇺 The European Parliament lets #ChatControl 1.0 go through despite a majority voting against it (314:276) – allowing mass scanning of private chats until 2028. Survivors are warning. My analysis and why this is the wrong approach 👇 https://www.patrick-breyer.de/en/eu-parliament-greenlights-chat-control-1-0-breyer-our-children-lose-out/ #DemocracyFail
Open quoted post
8
0
7
kkarhan @kkarhan@jorts.horse · Apr 20, 2026
Replying to @jwildeboer@social.wildeboer.net
@jwildeboer@social.wildeboer.net it's only decentralized if there's no #SinglePointOfFailure. Same goes for anything else: Regardless if #XMPP+#OMEMOIf say 5222.de is down the only ones noticing are their users and their contacts.Or #PGP/MIME.And that is it's strenght. In fact #eMail is so powerful that @delta@chaos.social / #deltaChat is getting popular in #Russia because even if they wanted to, (they don't, obviously!) they couldn't comply with #Roskomnadnozr's #Cyberfascism!
1
1
0

You've seen all posts