Hacker News new | past | comments | ask | show | jobs | submit login

Web-based PGP is a bad idea from a security standpoint.

Why would you want GMail to handle your PGP encryption, when it's basically known that they hand over email content to the USG? You think your PGP keys would be safe there?

If people want to encrypt their web-mail using a web client they might as well just run the email message through a shift cipher because that's about the upper bound on security you can expect.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: