Google'es End-to-End

Fabio Pietrosanti (naif) lists at
Wed Jun 4 21:05:42 PDT 2014

Il 6/3/14, 11:53 PM, rysiek ha scritto:
> Hi there,
> not sure what to think about this one:
> Technical specs:
It's very bad that they reimplemented a new PGP stack in JS when there
is a multi-stakeholder community effort with OpenPGP.js

Look their comments about it:
"Not a stupid question at all. We actually considered this option, but
OpenPGP.js looked pretty bad back then.
Security-wise the library wasn't in good shape.
One of our cryptographers would "classify [OpenPGP.js] as trash.
It has been audited recently, but the result doesn't look very good either"

I think that Google should make a turn-back and switch to using
OpenPGP.js, that's a modular, secure, widely compatible and performant
PGP stack library in javascript, with heavy improvements done in the
last 9 months, thanks to multiple developers working on it for different

I reported such issue here:

Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights - -

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/html
Size: 2484 bytes
Desc: not available
URL: <>

More information about the cypherpunks mailing list