Hacker News Reader

Comment by mirimir | Hacker News Reader

The Ars article ends with:

    "A real audit of the [GnuPG] code would be great," Green said. "The problem
    is it would be really expensive and I'm not sure it's worth it."

I wonder what Green means as the alternative to auditing the GnuPG code. Doing nothing? Or could he be arguing that it would be better to start from scratch? Is there a replacement in the wings? Or even as a glint in someone's eye?

View on HN

Yes, there's NetPGP: http://www.netpgp.com/

That is interesting. I wonder if Enigmail would support NetPGP as an alternative.

FTA:

"Meanwhile, Google and Yahoo are proceeding with End-to-End, a project that aims to rewrite PGP code from scratch to make e-mail encryption easier."

In <https://github.com/google/end-to-end> I see that "End-To-End is a Chrome extension that helps you encrypt, decrypt, digital sign, and verify signed messages within the browser using OpenPGP."

That's rather limited.

Reply on news.ycombinator.com