On Wed, Feb 04, 2015 at 12:59:06AM +0100, rysiek wrote: > Answer B: > Can you please direct me towards any software that in your opinion does not > have a problem with the "host security" part? > A single example of any program, > say any communication program, like IM, VoIP, e-mail client, etc, installable > on a chosen operating system.
i can: pond stores the key material in tpm, whether to trust tpm or not is open for debate. gpg is able to work with smartcards, and qubes has this split-pgp mode. these are all quite cool approaches to the host security problem. i think in general it is about compartmentalization of sensitive material, if possible in external fully controlled hw with very simple observable interfaces. > Problem is, people DIE, NOW, because they use Skype. Not because they they will they as well if they use the right tools but wrongly. :/ > How about we let stef talk about that himself. you troll. :) -- otr fp: https://www.ctrlc.hu/~stef/otr.txt
