Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Fabio, On 1/21/2014 6:28 PM, Fabio Pietrosanti (naif) wrote: From the very active OpenPGP.js community it has been just released the Alpha version of WhiteOut mail, an encrypted email client entirely done in HTML5/Javascript delivered as a

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Fabio Pietrosanti (naif)
Il 1/22/14, 8:06 AM, Paul Ferguson ha scritto: While I do not disagree with you here, per se, I would like to point out that any client that gratuitously trusts JavaScript *or* HTML5 is also a client which allows the end user to be victimized by the most casual daily criminal campaigns. I

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Top-posting to retain context here... I am not criticizing JavaScript -- I am advocating the segmentation of using JavaScript for encryption from JavaScript for everything. :-) If runtime JavaScript can be contained just for the encryption

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Andrew Lewis
There are other attacks on even chrome apps, as the recent sales of legit extensions to shady groups who use it for malware/adware distribution because Google allows transfers of ownerships and the new owners to update the extensions with anything they want. On a related note can someone who is

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Tony Arcieri
On Tue, Jan 21, 2014 at 6:53 PM, Fabio Pietrosanti (naif) li...@infosecurity.ch wrote: I just would like to argue that the delivery (download, installation, upgrade) of an Chrome App is far more secure than an native application with an executable installer, due to the trust model of

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Andrés Leopoldo Pacheco Sanfuentes
What is the value proposition of changing email client from Gmail? On Jan 21, 2014 10:24 PM, Tony Arcieri basc...@gmail.com wrote: On Tue, Jan 21, 2014 at 6:53 PM, Fabio Pietrosanti (naif) li...@infosecurity.ch wrote: I just would like to argue that the delivery (download, installation,

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/21/2014 8:52 PM, Andrés Leopoldo Pacheco Sanfuentes wrote: What is the value proposition of changing email client from Gmail? Please don't feed the troll. Thank you. - - ferg On Jan 21, 2014 10:24 PM, Tony Arcieri basc...@gmail.com

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Andrés Leopoldo Pacheco Sanfuentes
I don't understand the troll stuff.. Can you explain, please? Thanks! On Jan 21, 2014 11:11 PM, Paul Ferguson fergdawgs...@mykolab.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/21/2014 8:52 PM, Andrés Leopoldo Pacheco Sanfuentes wrote: What is the value proposition of

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Yosem Companys
Everyone who has commented so far is a regular Liberationtech mailing-list contributor, so I don't see any trolls here. Not that anyone has done it yet but, just in case, please refrain from any personal attacks. Best, Yosem One of the moderators On Tue, Jan 21, 2014 at 9:26 PM, Andrés