[Cryptography] Toxic Combination

stef s at ctrlc.hu
Mon Dec 15 01:04:55 PST 2014


On Mon, Dec 01, 2014 at 09:58:25AM +1100, Alfie John wrote:
> just look at how PGP is also the _correct solution_ for encrypting messages
> and yet has not had the uptake since 1991!

the truth of this statement depends heavily on the threat model. the-amongst
others-all-archiving kraaken is copying all pgp-cryptograms, as they are shiny
beacons of cryptographic interest. not only do they generally disclose the
recipients in plaintext metadata, but considering the ANT catalog, hacking
team, finfisher FinISP and other market offers for cheap side channel attacks
to recover key material, i would say this statement was true until a few years
ago.

-- 
otr fp: https://www.ctrlc.hu/~stef/otr.txt



More information about the cypherpunks mailing list