Comment on [deleted]

• CrayonRosary@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Did you even read that article? It has nothing to do with what I said. I pointed out that you don’t understand how public key encryption works, and you replied with an article about an exploit that does not refute what I said. An exploit that can be avoided by simply not clicking “load images”. An exploit that has probably been fixed in a client like Thunderbird anytime over the past six years.

  I don’t know why I’m wasting my time with you. You can’t even argue in good faith.

  source

  • horse_battery_staple@lemmy.world ⁨1⁩ ⁨week⁩ ago

    So you agree that an unsolicited message from someone, asking you to email them could be suspect.

    source

    • CrayonRosary@lemmy.world ⁨1⁩ ⁨week⁩ ago

      How about you address my actual reply instead of changing the topic constantly?

      The PGP public key still has to be shared plaintext… that makes it useless as anyone can sign it after that.

      That sentence is incorrect. Just admit it.

      source

      • horse_battery_staple@lemmy.world ⁨1⁩ ⁨week⁩ ago

        I’ve admitted that was wrong in other posts in this thread.

        The unsolicited nature of the initial communication is what I’m concerned with.

        I’m learning a lot about PGP in this thread but my initial point still stands. Unsolicited invitation to an unencrypted email is a problem for me and my security hygiene.

        source
• hendrik@palaver.p3x.de ⁨1⁩ ⁨week⁩ ago

  Nice attack. But does this have any real-world consequences? I mean the attacker is decrypting their own email here, as far as I understand. This shouldn't be possible. But it doesn't really do harm, does it? I mean they wrote that text themselves, so they already know what's in there?!

  source

  • horse_battery_staple@lemmy.world ⁨1⁩ ⁨week⁩ ago

    It’s a problem with the local email client and PGP not being securely handled locally. I’m learning a lot about email in this thread.

    source

    • hendrik@palaver.p3x.de ⁨1⁩ ⁨week⁩ ago

      Yeah, this thread is weird. Completely different up/downvote ratio than the other one. And seems it's now entirely about email and PGP 🤔

      source

      • horse_battery_staple@lemmy.world ⁨1⁩ ⁨week⁩ ago

        Well you see, I was wrong on the internet about PGP and Email.

        The good thing though is I’m learning A LOT lol

        source