From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 66F6A1384B4 for ; Mon, 28 Dec 2015 16:36:15 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1C43521C01E; Mon, 28 Dec 2015 16:36:07 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2D05021C003 for ; Mon, 28 Dec 2015 16:36:06 +0000 (UTC) Received: from localhost (unknown [91.246.102.95]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: bircoph) by smtp.gentoo.org (Postfix) with ESMTPSA id 906BF33D3CD for ; Mon, 28 Dec 2015 16:36:03 +0000 (UTC) Date: Mon, 28 Dec 2015 19:35:59 +0300 From: Andrew Savchenko To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] [RFC] New project: Crypto Message-Id: <20151228193559.16d07a4e49d6f06b39d79c32@gentoo.org> In-Reply-To: References: <5655EBF0.9000804@gentoo.org> <56560A11.8030700@gentoo.org> <56561851.2020900@gentoo.org> <20151228014934.e94250f4670cde139dbc7867@gentoo.org> <21A8380F-6010-4CDD-8DEF-02FA11217D21@gentoo.org> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.20; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA512"; boundary="Signature=_Mon__28_Dec_2015_19_35_59_+0300_+iA+MVeyfZCvQ+z3" X-Archives-Salt: f573ed4a-0632-4733-8800-3e98963ecb0e X-Archives-Hash: d2802ba64cf788b0005e630211cb6db5 --Signature=_Mon__28_Dec_2015_19_35_59_+0300_+iA+MVeyfZCvQ+z3 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, 28 Dec 2015 09:42:40 -0500 Rich Freeman wrote: > On Mon, Dec 28, 2015 at 8:11 AM, Kristian Fiskerstrand w= rote: > > > > > > [Sent from my iPad, as it is not a secured device there are no cryptogr= aphic keys on this device, > > meaning this message is sent without an OpenPGP signature. In general y= ou should *not* rely on > > any information sent over such an unsecure channel, if you find any inf= ormation controversial or > > un-expected send a response and request a signed confirmation] >=20 > And this would be why I don't bother to sign my emails any longer. > The FOSS world is still stuck in the days when people ran X11-based > MUAs and stored their mail in conventional folders. I've yet to see a > decent browser-based MUA or Android client which does signing. > Squirrelmail does, but it is really lacking compared to something like > Gmail. YMMW, but I'm perfectly fine with Claws mail on my phone. Another problem is that this device lacks reliable RNG and faces threats of baseband processor data interception (as well as all other phones I'm aware about). So phones/tablets are not suitable for cryptography anyway. P.S. We had a good discussion of this on core, but still have no summary on dev ML. Best regards, Andrew Savchenko --Signature=_Mon__28_Dec_2015_19_35_59_+0300_+iA+MVeyfZCvQ+z3 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJWgWTvAAoJEPZTWjO6HuSNRucP+weD2T1apv5tCL4I89QKcoNw pgafT8fjj+HbJ8lpwA0vJySISrjGkEVvNpLgW9N8SnK1ogXMdEDFzIGJ1Q2afP1p v0+6k5PtfPF9cwgkXrKJ+edNDAMTwUQbxCCdzS0OnGvWfnMmiPbEiPLnmzT0eFKS jRMQwTVXvgr8eUTViL3JNjTImzoop4TLMhB43tkT13VFCVsou5Ap9a5joQ7ZZXxp 235HWmsSYs4UKL88NmF8Y8NMgIeVxc9mLjQFYtUSt3Kv+7l30UMj4qe4QElpmu9o 0lbuOilqN1ZQDkJXJCd7JrpP1p0d7l9vn/hIzK8W8CjD/UKS7AjfvNUCyy6krOmZ jRDTIb3j/gRMvdtA+Iqp8ek7Ij0KcX25IAiWpKK1lRaLtw0vXpMISaiPL9/zLI+N tQnahmIlcpZNHDxo861hj6krwu0v6ZcJftmtJj6XAt+2OJxI+1o1l1LuOBxF59gX N+tmcpm40GyUCK7YGtlRMroqyMMs2rJw3O4e0+/m3WAv5dUEON1fzY3wYDBlxoWW 9hbeDanL9sccv8ob/wQkXe7i6pN8l9ch3rrt/IA0ldsa1xeReT4NvQOZA2WXins7 WT5xrLozn5lJbiSJzA19Pr02vcNXJcUdvnyqe4l0pJnQprTRvb6fJO7u77GkQdTT hqrMB4KIWwxbHRmk6ur9 =XtH1 -----END PGP SIGNATURE----- --Signature=_Mon__28_Dec_2015_19_35_59_+0300_+iA+MVeyfZCvQ+z3--